f49bb25db73648bf515e2f44180e44c4f6ba56d39badb3e7e6dec7fc9df323f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f49bb25db73648bf515e2f44180e44c4f6ba56d39badb3e7e6dec7fc9df323f2
Size

119KB
MD5

44af2907b2a71cc62f192cff024af54a
SHA1

2a04d7ea99e37abc7dd9f809e14a2c61e5a59d10
SHA256

f49bb25db73648bf515e2f44180e44c4f6ba56d39badb3e7e6dec7fc9df323f2
SHA512

16c574f54dcb893ca03492e3783f3ff3f2e1648b260b8348d0f0f6be13efddb0117825ac96820e097ab2eaeaf883b9c237c31e63e12ed55f49ec0ff87e2ade28
SSDEEP

3072:9nRYb7UeHe5qJTsT/+8c0TmxcEusyoTib:9C7Un5qW/TmcFsw

Score

N/A

Malware Config

Signatures

Files

f49bb25db73648bf515e2f44180e44c4f6ba56d39badb3e7e6dec7fc9df323f2
.exe windows x86

e141c86c8e2375c8ff40216170b86325

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
RegisterConsoleVDM
GetNumaHighestNodeNumber
GetConsoleMode
LZDone
GetShortPathNameA
GetCurrentThread
MapUserPhysicalPages
ExitThread
SetEndOfFile
SetFileTime
SetConsoleOutputCP

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE