634e9dfbdc16eb514a02c5789abb18a6a5938796a8550a28fc2d9ec1510704e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

634e9dfbdc16eb514a02c5789abb18a6a5938796a8550a28fc2d9ec1510704e0
Size

56KB
MD5

1c94c2ee57357d552ef3fa91443d461b
SHA1

7520a71c554f1d0b4ba06f7f065a4d3f48e349fb
SHA256

634e9dfbdc16eb514a02c5789abb18a6a5938796a8550a28fc2d9ec1510704e0
SHA512

848ffeeceb0877ec29468936e14f1f4e51ca43573a766b93d30b8c7822ca2e2fd247dfa16b72da9da6417a305425f244686d78f3fa2681f52e608cd9acb54681
SSDEEP

1536:BzAGww3u3sH8X2oJQ2fK20ikM3I43g6AmMwjlM:R137H8X2oJNyG54cg6xM1

Score

N/A

Malware Config

Signatures

Files

634e9dfbdc16eb514a02c5789abb18a6a5938796a8550a28fc2d9ec1510704e0
.exe windows x86

c4d0bd048e59e1f6691d66ad44787eb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileExW
GetDllDirectoryA
GetConsoleCommandHistoryW
EnumCalendarInfoExA
CreateEventW
WriteProcessMemory
GlobalAddAtomW
PeekNamedPipe
WriteProfileSectionA
Process32Next
SetThreadPriority

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE