cab3294a2b1bba8bb84b64d6f94bd94cffeb86e675b24bdb766a24fab063351b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cab3294a2b1bba8bb84b64d6f94bd94cffeb86e675b24bdb766a24fab063351b
Size

56KB
MD5

f654631d4297b4b4057098c63be95c9c
SHA1

0f97c59fb56e2e53f602e13bdd71fd63767050b1
SHA256

cab3294a2b1bba8bb84b64d6f94bd94cffeb86e675b24bdb766a24fab063351b
SHA512

dd052e8f5097763e27e512590e6eece40b752271e8fa16a2fe5d5c1801843f553a97b553a533495b700cf424fe6236f88589c3eca66285c7fb506c351a7d235e
SSDEEP

768:tZrYryaIfbb4GH/49bgAKKoQzk8n+1iNLghszNB9s8QXP+3HXM5XHtyxf9Kisl6s:tZsTiA/ob+L7zJs8SPgiXqKisl53AA

Score

N/A

Malware Config

Signatures

Files

cab3294a2b1bba8bb84b64d6f94bd94cffeb86e675b24bdb766a24fab063351b
.exe windows x86

7ddb61a869877eccbc2e6c988d00d546

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ValidateLCType
CreatePipe
CreateFileA
WriteConsoleOutputA
Process32Next
GetCommandLineW
DosDateTimeToFileTime
HeapAlloc
InterlockedPushEntrySList
GetConsoleDisplayMode
IsValidCodePage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE