70f884c232a83ad8a043906659732be6bc3425540fb808c50024e5689f4933e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70f884c232a83ad8a043906659732be6bc3425540fb808c50024e5689f4933e9
Size

27KB
MD5

9b25ddfec79408b3602ae55a9d03c887
SHA1

65a2c22a4df1e0e984bc9c12f905a227061934e0
SHA256

70f884c232a83ad8a043906659732be6bc3425540fb808c50024e5689f4933e9
SHA512

d7a9dd90d81c5df1eed01c24337769853e6401cf89c57996a57f29eec83f4e7fa0845666e9f86ed673392eb0b4613395a08e20562f21ed1dd3840fa1a410a8cf
SSDEEP

768:dS9WwcLW4adZE0s5fTNCTcG6zYBmHdstWfniiWP+LLDifcqlK5V:dte1AT8uY2fnam3DifcuKP

Score

N/A

Malware Config

Signatures

Files

70f884c232a83ad8a043906659732be6bc3425540fb808c50024e5689f4933e9
.exe windows x86

f1c98688580a829204713be3ec464a74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleMenuClose
CloseProfileUserMapping
GetNamedPipeInfo
GlobalUnfix
FindResourceA
GetFileAttributesA
IsBadReadPtr
CreateMailslotW
DeleteVolumeMountPointW
SetLocaleInfoA
GetCommConfig

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 76KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE