b0473fad602bbc6afadb3dd72d7aaaeead0ebb3256748b4365a844c6f6fee33c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0473fad602bbc6afadb3dd72d7aaaeead0ebb3256748b4365a844c6f6fee33c
Size

56KB
MD5

e4e8143db2188bc8c36067aa16065cca
SHA1

431c8893e28da24f93f958cdb7a15a9d191ad221
SHA256

b0473fad602bbc6afadb3dd72d7aaaeead0ebb3256748b4365a844c6f6fee33c
SHA512

c85fec5f04624eea995236db438b2f14bea697e266187e89899b1c59cf149e336490c7ee5c8abff7bf5fcb6d1863b1b400af279470241abf95308f61f9165a42
SSDEEP

768:5NNNNNXFoPD5dP+/1zIeP4phN9RIz39DJjlSTiO/xXlZMCPrHIxNC2IU2Woc2vra:xkmdk3LIz3PjlSTi+xX3rPraCRWBWdPo

Score

N/A

Malware Config

Signatures

Files

b0473fad602bbc6afadb3dd72d7aaaeead0ebb3256748b4365a844c6f6fee33c
.exe windows x86

faa169822448588a23ad97ba6045c203

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsW
lstrcpy
FindNextVolumeMountPointW
MapViewOfFile
ScrollConsoleScreenBufferW
CopyFileExW
GetProfileSectionW
ResumeThread
DebugBreak
GetCurrentConsoleFont
GetProfileIntA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE