b429655a91b74d3f7999231120dbde263ec94484854bfddaa2df20368b0a8af4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b429655a91b74d3f7999231120dbde263ec94484854bfddaa2df20368b0a8af4
Size

63KB
MD5

36741bae90c3ddd12d38c86cab1874a5
SHA1

a152e5c1cc9bd90f955b0135feec5d215138a5a2
SHA256

b429655a91b74d3f7999231120dbde263ec94484854bfddaa2df20368b0a8af4
SHA512

36d2bd872a431bf68fbf6b74c748e544824c69dae2294ae75efc4db4190084f481a0fbe2f6d4cdbcdfb6b31046ad5d7d161508cd6e4af36a45ae003d0e429e3b
SSDEEP

1536:oyTKH2RvcE3zhV9yyBUcOX+g9Ap8/CZTCsdXp/KjJZHzq:iWREor9rB0ug9+SMOs1FsjHzq

Score

N/A

Malware Config

Signatures

Files

b429655a91b74d3f7999231120dbde263ec94484854bfddaa2df20368b0a8af4
.exe windows x86

bd799509f2f17f78638458e2fdb81c43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetPrivateProfileSectionNamesA
GetConsoleProcessList
AllocConsole
GetAtomNameA
IsDBCSLeadByte
SetConsoleCursorPosition
FindAtomA
WritePrivateProfileSectionW
FindFirstChangeNotificationW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE