d181d47cafda2bded0d4fe1c46d76e9c465a00fb00f56d3005382eca7c7cafc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d181d47cafda2bded0d4fe1c46d76e9c465a00fb00f56d3005382eca7c7cafc7
Size

62KB
MD5

9a83cfb9ac2c304cee4dae720f986e7e
SHA1

04499b4e770b32d81684bb5fa2a5ff6a4d2840f3
SHA256

d181d47cafda2bded0d4fe1c46d76e9c465a00fb00f56d3005382eca7c7cafc7
SHA512

06439ed860eed3da0d7c463507a9bd4dfc71b863323ecc45bb3e417235a8ee15186ffaa4d0c7100b542082664e62bc0991343b4b3b4f3b529a161a73445a1940
SSDEEP

1536:9BLVETWiTC+P63XEJac1Fg0DCjArw/nRJhuU3xkHT:XV0ZP6k20W/nRJhxw

Score

N/A

Malware Config

Signatures

Files

d181d47cafda2bded0d4fe1c46d76e9c465a00fb00f56d3005382eca7c7cafc7
.exe windows x86

50fdc90227b0d280ceee0a5dee540286

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointA
_lopen
GetSystemTimeAsFileTime
_lcreat
GetConsoleAliasExesW
WaitForSingleObjectEx
SetVolumeMountPointA
GetThreadLocale
GetNlsSectionName
SetNamedPipeHandleState
CopyFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE