b0464ad75831f9612f7424e49ff88417de66e5cc84c7c6e313fe9e8567ba3b84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0464ad75831f9612f7424e49ff88417de66e5cc84c7c6e313fe9e8567ba3b84
Size

629KB
MD5

2ef96d8908a75f3c3be75289b91fc097
SHA1

50361024f080bd3b74c03b4f4c4c3a09c39abf73
SHA256

b0464ad75831f9612f7424e49ff88417de66e5cc84c7c6e313fe9e8567ba3b84
SHA512

836efecccc9e125a2ae4cb1e0139d0f8b4e4e53097831736f49180be1e929b2a583a89c4fbbe230c876589d97e761d8a36c35f38853db16dcfd1cfe9ba7694d1
SSDEEP

12288:Tvgb+x+vQhtMD3Fy/7Jl0b4eCuPG4/NL5uCWYncsA:ar1IUc1u9LZpnlA

Score

N/A

Malware Config

Signatures

Files

b0464ad75831f9612f7424e49ff88417de66e5cc84c7c6e313fe9e8567ba3b84
.zip
NR-08033348525831M3.com
.exe windows x86

a4c59f8399a53bb5c57d011baca5b971

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rsaenh

CPDecrypt
CPEncrypt
CPCreateHash
CPDeriveKey

kernel32

GetCurrentThreadId
LoadLibraryW
WriteConsoleA
GetShortPathNameA
CloseHandle
HeapAlloc
VirtualAlloc
OpenFileMappingW
CreateSemaphoreW
LoadLibraryA
CreateProcessW
OpenMutexA
lstrcmp
FindClose

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 661KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE