981d2aa716c68d8287d1e1c6bc73be35c31c3029238d4e26f20cbe14cfd270fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

981d2aa716c68d8287d1e1c6bc73be35c31c3029238d4e26f20cbe14cfd270fd
Size

63KB
MD5

948f7655d52ecdcf8fd6dc94846b4410
SHA1

744ab2275f94733bc680facf1bde855db8b5c922
SHA256

981d2aa716c68d8287d1e1c6bc73be35c31c3029238d4e26f20cbe14cfd270fd
SHA512

fee0c96ceb94581de49098d0eb36f49284ebff23a245f872c4c0af6d0aefa003a1a4d71d84657766a4afa3966055bbd4e7eab940efc2f2e657ea922ee865bc91
SSDEEP

1536:DbeBYqiwBVDxaZhGFS1tW232FTjnBh2MlUXgamXpO:GBjvDxaZhmEtW232xn32wUXgVXE

Score

N/A

Malware Config

Signatures

Files

981d2aa716c68d8287d1e1c6bc73be35c31c3029238d4e26f20cbe14cfd270fd
.exe windows x86

43c19ff8ff01900b34020e6f53e69510

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseConsoleHandle
GetSystemDefaultLangID
Process32First
ReadDirectoryChangesW
CallNamedPipeW
CreateNlsSecurityDescriptor
RegisterConsoleVDM
_llseek
ResetEvent
EnumResourceNamesA
GetFileType

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE