b97b3390432f3bff2dbb04f9321d4f9ba299b6cb9b37d64dede6bab8ff208ecb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b97b3390432f3bff2dbb04f9321d4f9ba299b6cb9b37d64dede6bab8ff208ecb
Size

83KB
MD5

8cbe249a1d9225a1ab769bc80653f9e6
SHA1

90a876e228449d5624b7e3129ed2bf232b674441
SHA256

b97b3390432f3bff2dbb04f9321d4f9ba299b6cb9b37d64dede6bab8ff208ecb
SHA512

509fb3d5c160278545e80f513241aecbdf409bbf3e437136d8cc92c0789fa7bcc9393d3c640338f32a8e89da602c8287336c7f044d15d36ba173320647843330
SSDEEP

1536:2CK5lhgmpzKvIjpWvgUtGGbpzHJSPMAxcBNWpjVrs2ryrd1vUQuq8:213YvIjpyLtGGbpzHJSUvNWHs2q

Score

N/A

Malware Config

Signatures

Files

b97b3390432f3bff2dbb04f9321d4f9ba299b6cb9b37d64dede6bab8ff208ecb
.exe windows x86

252f4c37ed6c831ac5623fddfa4dd05b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeactivateActCtx
DeleteFiber
VirtualFree
GetThreadContext
VerLanguageNameW
GetLastError
AddConsoleAliasA
LocalReAlloc
lstrcmpW
PostQueuedCompletionStatus
GetConsoleAliasExesA
GetOverlappedResult

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE