631b37739898ec85a16ae52566ed622c70eba435494df5bb73c2f279bc73560b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

631b37739898ec85a16ae52566ed622c70eba435494df5bb73c2f279bc73560b
Size

83KB
MD5

f2d1aa5f6b0e3886eaf446799e749b3c
SHA1

db49d20a90c5fd52ab504d0d7fda3474a02ccabb
SHA256

631b37739898ec85a16ae52566ed622c70eba435494df5bb73c2f279bc73560b
SHA512

d94cba7c4d9d5eadf9120fda4e45b20ff75330b95657ced4dc5938414a58162735e92c14ecc267ef860a914e189d47a627578389e46f9be1969d7794df97b6cb
SSDEEP

1536:tRo9OCjmurDAh+vYRTbt0U3sp74lQawwMhg0N2ijEErxTWDTMqhGKYIZTET8ajJ:t/C5AImTbu3N8E32ijBkMqhGKZTbajJ

Score

N/A

Malware Config

Signatures

Files

631b37739898ec85a16ae52566ed622c70eba435494df5bb73c2f279bc73560b
.exe windows x86

036567a090131ddccb5a5615ec410676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
ReadConsoleA
SetFileShortNameW
Thread32First
ReadDirectoryChangesW
CreateSocketHandle
SetThreadExecutionState
BeginUpdateResourceA
FileTimeToLocalFileTime
TryEnterCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE