a4aee5867a32cf337f56c14f6a3234001ecdf05b164d2cfaf5188670124638e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4aee5867a32cf337f56c14f6a3234001ecdf05b164d2cfaf5188670124638e4
Size

56KB
MD5

fc334c79c0038ddedfe639ea807fdfb1
SHA1

274766c9f9e32dc9830705865ca541c4fbb0f279
SHA256

a4aee5867a32cf337f56c14f6a3234001ecdf05b164d2cfaf5188670124638e4
SHA512

ace7f678a27f0b86c637de426c6bcd8a422fbeee350270b5853a7d4d5035416e41fb1a2286e95c0dc03c22636d79bf53d120b8f46e7093e3d4df48c923ba0659
SSDEEP

1536:dxJBHXZF6A/e6p3QUQmMX5eF1yXCYARwgi7:dxJB3ZQAWWcbQ1yZARwB

Score

N/A

Malware Config

Signatures

Files

a4aee5867a32cf337f56c14f6a3234001ecdf05b164d2cfaf5188670124638e4
.exe windows x86

611f3a1eea78387f6f7900eb4e089356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveVectoredExceptionHandler
GetModuleFileNameA
FindFirstFileA
CreateRemoteThread
OpenEventA
GetConsoleCharType
BackupSeek
lstrcatA
DebugActiveProcess
CloseHandle
DebugSetProcessKillOnExit

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE