d0ca943a758a999f403f229ffb40269581e653c386f678b5ab6769e763a887f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0ca943a758a999f403f229ffb40269581e653c386f678b5ab6769e763a887f0
Size

320KB
MD5

6df9f58547486e87f1e560d24766e5b0
SHA1

a4ff3236525b1c1c07de34bc64fbf8d873f99f48
SHA256

d0ca943a758a999f403f229ffb40269581e653c386f678b5ab6769e763a887f0
SHA512

3af5aeef8b6985f24b4fd172cb1a07189cca7b8231fd86b536159de2e7101ad6085a6f5925ae810f138a32c17e4b530112039e2d290005551d07e8b8aaf3a1c2
SSDEEP

6144:OwG9UH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:NCy2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

d0ca943a758a999f403f229ffb40269581e653c386f678b5ab6769e763a887f0
.exe windows x86

4b8b500d8ba565da29277521b55cab83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessAffinityMask
CreateConsoleScreenBuffer
ValidateLCType
SetThreadIdealProcessor
RegisterConsoleIME
GetStringTypeExW
GlobalHandle
WriteConsoleOutputW
lstrcmp
OpenSemaphoreW
GetNlsSectionName

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE