f065db8a1c74a940f623b84e4e25d8473c649a69196c80466e1bedf2055671a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f065db8a1c74a940f623b84e4e25d8473c649a69196c80466e1bedf2055671a4
Size

65KB
MD5

ee9037fe953624b6d9297de908a6391c
SHA1

ef37fff5bf7bc2134905036b6afb6ca85ea47cdd
SHA256

f065db8a1c74a940f623b84e4e25d8473c649a69196c80466e1bedf2055671a4
SHA512

98eb9b388a5286cb38fdf7689338d441ef6c00e70395cba2f931809f7cf10f5ff99ebd8506157046307907221889a017b4ea77300f5495e1649365e63371c06c
SSDEEP

1536:5qJBrsIWLYh9Xj9hbqbj29cOR44ZzRQ+eKHdhyRX3U7T:5pr8htj9hebjAcOwHX3qT

Score

N/A

Malware Config

Signatures

Files

f065db8a1c74a940f623b84e4e25d8473c649a69196c80466e1bedf2055671a4
.exe windows x86

efef40155185459f95b9afcc6cd30dbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
ExpungeConsoleCommandHistoryW
DeleteCriticalSection
CreateProcessA
GetThreadPriorityBoost
SetLocalPrimaryComputerNameA
GetAtomNameW
QueryActCtxW
EnumerateLocalComputerNamesA
WritePrivateProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE