da856d4dc4b8b6d151ab42e930caa0273c9e23636c8015a13b9238e86decbc2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da856d4dc4b8b6d151ab42e930caa0273c9e23636c8015a13b9238e86decbc2e
Size

92KB
MD5

2b853dd9c135e7588a793263b5cf482f
SHA1

25287778e9309725db2ed4d9747ede1234a80b0e
SHA256

da856d4dc4b8b6d151ab42e930caa0273c9e23636c8015a13b9238e86decbc2e
SHA512

be9708e534fa0ec7d432afc2252915a2feb6a38e4062db95c6a6c62068965a81e177203c2bf4425236162fc8e58922953c7eada9a5756a4f2b03d5e98731a189
SSDEEP

1536:CfUiizGCNKwfreDY7xSBS7A0dGoxtNLQUqcP8ZqZ83YacIyP/69QAq0Gb8/Z5H8T:wUiONKkQYSByrfxPOGIqKYBbWq0GQP0j

Score

N/A

Malware Config

Signatures

Files

da856d4dc4b8b6d151ab42e930caa0273c9e23636c8015a13b9238e86decbc2e
.exe windows x86

b39ffaf7a1404f9921eaf5d5dcd1ef22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableW
ReplaceFileW
GetConsoleAliasExesW
RtlCaptureContext
CmdBatNotification
GetNlsSectionName
TlsSetValue
CreateConsoleScreenBuffer
SetConsoleTextAttribute
lstrcmpW
FindFirstFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE