a506149836f76bb8b47c2e1cb35dceaec8f8151a6c207290bf7fd9c2bfa96077 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a506149836f76bb8b47c2e1cb35dceaec8f8151a6c207290bf7fd9c2bfa96077
Size

56KB
MD5

8f96382344dd567cda450fccf218b964
SHA1

389641e0962307e7ba7c413498d99254e0c2055d
SHA256

a506149836f76bb8b47c2e1cb35dceaec8f8151a6c207290bf7fd9c2bfa96077
SHA512

c55c520497eef9bbad7fdd73c62e84cc7a40a9cefbdd1a294f10a2103a0aeb5d98a33af441b69daf7bc3f5f29857285a57e97df8dc337137d194e898074e48d1
SSDEEP

1536:UmaZT7/FhQRI1VrwPi965sXlxLbb6MjQBu5MBM:BaThGIPktmXX6MjQWCM

Score

N/A

Malware Config

Signatures

Files

a506149836f76bb8b47c2e1cb35dceaec8f8151a6c207290bf7fd9c2bfa96077
.exe windows x86

e6cca14e4bb54cbef11cbc5942bb20c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
EnumUILanguagesA
GetProfileSectionA
GetCommState
GetComputerNameExW
Process32NextW
VirtualLock
GetConsoleAliasW
lstrcmpiA
BaseFlushAppcompatCache
FindActCtxSectionStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE