b4243aad1a49019abf9dadcb9e7efc186420e1e521a49b576530edd621ad6cf5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4243aad1a49019abf9dadcb9e7efc186420e1e521a49b576530edd621ad6cf5
Size

76KB
MD5

5b38720ddd194bbe7d69e7bac08632d0
SHA1

ff83b9bfab1644602cbad2a888b2425089ab3e4b
SHA256

b4243aad1a49019abf9dadcb9e7efc186420e1e521a49b576530edd621ad6cf5
SHA512

01adcc21bac1de6446048f51416adf44c4acfdb3d0ad235a35a75817f89ac67006bc6baabd5836e57f352dfdf57c07138ee660776426864e520b80a7d2e6e0b3
SSDEEP

1536:35WWWWWmq+bpuI15eOGI4yZKWE9NbXMW4swSW/84ACN2zjEErxTWDTMqhGKYIZTF:35WWWWWmq+sL1qKHbnwSW/84Aq6jBkM+

Score

N/A

Malware Config

Signatures

Files

b4243aad1a49019abf9dadcb9e7efc186420e1e521a49b576530edd621ad6cf5
.exe windows x86

2fbee8189c3a7f8fd9324336de9e26a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
MapUserPhysicalPagesScatter
DosDateTimeToFileTime
FindVolumeMountPointClose
ReleaseActCtx
QueryDosDeviceA
InterlockedPopEntrySList
SearchPathA
TlsGetValue
CreateJobObjectA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE