4369c59a1663fdb0de68a1a0e69b13cfeab447f3f89e36a15f1478f1c7d98b84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4369c59a1663fdb0de68a1a0e69b13cfeab447f3f89e36a15f1478f1c7d98b84
Size

63KB
MD5

91848174009e839c48971de1c6e56acc
SHA1

48618162f46f238f15e661ed80b0824e3fd4564f
SHA256

4369c59a1663fdb0de68a1a0e69b13cfeab447f3f89e36a15f1478f1c7d98b84
SHA512

920b0c7ad94dbdd94cdb2c869006bae9fd9968b09909bc26b6ede4af13c75cecf05306d3dfab13bd97e2b96543c7d8195c3c1b9956a4b0890b702cebb3b15aa1
SSDEEP

768:4YSzkXMHlGai28za9RrnggxEt8QWl1K9dOtOqeaxqGNTI0Y1g5FKHYVoHs0veOwT:JroRUgxsWlocYGB45HMoHBedhmvJW

Score

N/A

Malware Config

Signatures

Files

4369c59a1663fdb0de68a1a0e69b13cfeab447f3f89e36a15f1478f1c7d98b84
.exe windows x86

381d27f9cd7c7235779475d91d9a952d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapWalk
AllocConsole
EnumSystemLanguageGroupsW
SetThreadExecutionState
InterlockedExchange
GetFileType
NumaVirtualQueryNode
EnumCalendarInfoExW
FreeUserPhysicalPages
RaiseException
CreatePipe

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE