655a5dfecc6aba3d0927a3b2f0b572cc923a88d0839d6037987401b220115e5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

655a5dfecc6aba3d0927a3b2f0b572cc923a88d0839d6037987401b220115e5e
Size

320KB
MD5

4428bf67b56127d08cf35012af6e9120
SHA1

b062858d05ed396946f9190fd207ee6d4f986f9e
SHA256

655a5dfecc6aba3d0927a3b2f0b572cc923a88d0839d6037987401b220115e5e
SHA512

ed6a01fca9200a166cfd7492710ab73b36e91e8607110d633636907d37143964cc6645190da5a3b75e47eef3ff8b3d8c05b3159cd9b13fd59d4428d460cfa8a0
SSDEEP

6144:DYVesQ+3PJrBH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:CF2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

655a5dfecc6aba3d0927a3b2f0b572cc923a88d0839d6037987401b220115e5e
.exe windows x86

81331b36df51acc6bbcfd001cfda4305

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TermsrvAppInstallMode
SearchPathA
GetQueuedCompletionStatus
CreateProcessA
GetExitCodeProcess
SetThreadUILanguage
FillConsoleOutputCharacterA
SetLocaleInfoA
Process32Next
BaseFlushAppcompatCache

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE