afa54e295e9feb0493404789643aabeb556cf8e98e7a3c4de5f704117d92f3d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afa54e295e9feb0493404789643aabeb556cf8e98e7a3c4de5f704117d92f3d3
Size

139KB
MD5

da53d4b7b8b49889725fa5cc985d1abf
SHA1

6039e664d02a754fe1310e38471a6c7535519435
SHA256

afa54e295e9feb0493404789643aabeb556cf8e98e7a3c4de5f704117d92f3d3
SHA512

823229222d397c9c6f38e0f074d3694cb352f786fd059d0a84fd1bff716c809a0c547c9efa0eb0ac28af000f89be96604e8f7f2c4e2f4443bbd80d5544abb1c1
SSDEEP

3072:D2nCh1YreuGRDdbp+ghTGANJ3T/CowYGe5ekTEFjKHPh:areLdbkwv/COG0eUOjKH

Score

N/A

Malware Config

Signatures

Files

afa54e295e9feb0493404789643aabeb556cf8e98e7a3c4de5f704117d92f3d3
.exe windows x86

4bcb4de164a464f735ef6944682c30fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EraseTape
WaitCommEvent
GetStdHandle
HeapDestroy
GetCompressedFileSizeW
EndUpdateResourceW
lstrcmp
FindActCtxSectionStringW
ExpungeConsoleCommandHistoryA
GetPrivateProfileStructA
InterlockedDecrement

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 83KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE