4ac723413617da659232d350c794bc220449e6fc43181b9b376b181c3521d0d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ac723413617da659232d350c794bc220449e6fc43181b9b376b181c3521d0d4
Size

63KB
MD5

99989837d65b8958e18f507496e8e400
SHA1

1297a6f83f6dfb6cf829a867d37185ff9e8a509f
SHA256

4ac723413617da659232d350c794bc220449e6fc43181b9b376b181c3521d0d4
SHA512

5a118cd2d64de1e64788ce420181719981083b1412e57f327e849516b7b8a7fb35c9b8f090a6f3d195b6cb67399ee7e2285ec9dd5b02611df8ba0b557ef8159f
SSDEEP

1536:YxLGZSlw/AWsLXD/POE0w1xFkHZs6ZEk+w2jSyoUJ/aJ:2LGSJD/Wlw/m5fGjw2WTURaJ

Score

N/A

Malware Config

Signatures

Files

4ac723413617da659232d350c794bc220449e6fc43181b9b376b181c3521d0d4
.exe windows x86

7ad1e226e7fb4852ea09de71fe9e6207

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
lstrcpyn
ReadConsoleOutputCharacterA
GetBinaryType
HeapSummary
IsBadHugeReadPtr
ExpandEnvironmentStringsW
ReadProcessMemory
ReadConsoleW
FlushConsoleInputBuffer
NlsResetProcessLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE