e1241b20ba0cf9e7691e8db50f8fb05dfaa3b3c7dfb7573beb75d44635dfa966 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1241b20ba0cf9e7691e8db50f8fb05dfaa3b3c7dfb7573beb75d44635dfa966
Size

56KB
MD5

9af698d9599b66c22bc7598af74e2724
SHA1

94e1088024952d6daa130e1bf86c180b84568a10
SHA256

e1241b20ba0cf9e7691e8db50f8fb05dfaa3b3c7dfb7573beb75d44635dfa966
SHA512

26068589be9178a35b472a8454cebd34265330c4c507d236faef1477e5a39355579ef2c3a127e614953f9d2df28d6461b3d3c588b9016dde24fdaa2b2a6d7fd0
SSDEEP

1536:dxFAlMrlFRFnnAOqLQ3zWSuDIK3fE0JyLiV:FqV/LQ3zWSnK3caciV

Score

N/A

Malware Config

Signatures

Files

e1241b20ba0cf9e7691e8db50f8fb05dfaa3b3c7dfb7573beb75d44635dfa966
.exe windows x86

c038e406b1392bbb1a0310f850089346

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetCPInfo
EnumSystemLanguageGroupsW
VerifyVersionInfoW
ReadFileEx
GenerateConsoleCtrlEvent
GetCurrentConsoleFont
FindFirstVolumeMountPointA
SetSystemPowerState
MapViewOfFile
FoldStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE