f254a34651b5e3765f3fd87284eff49a61c8afa35c0443a180e1432674efab34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f254a34651b5e3765f3fd87284eff49a61c8afa35c0443a180e1432674efab34
Size

320KB
MD5

49a96ed5b6b941a22d8890cb1f0119c0
SHA1

e580187380cb509f6c28ac80d3d72924d04b2fc2
SHA256

f254a34651b5e3765f3fd87284eff49a61c8afa35c0443a180e1432674efab34
SHA512

822b74822ec8d0f190d83c14ba25e54bc77451ebf9453791808d839145d39736d70c310ba101b18b0937c082df73df160118fd13269d25d5098aee1001f0955e
SSDEEP

6144:b11lV2DFRFjH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:b11H2BRp2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f254a34651b5e3765f3fd87284eff49a61c8afa35c0443a180e1432674efab34
.exe windows x86

c136eae8f29f72449e2cbb94c8588b64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
MoveFileA
CopyFileA
GetStringTypeW
GetFirmwareEnvironmentVariableW
FindAtomW
GetTimeFormatW
GetModuleFileNameA
lstrcmpi
GetTempFileNameA
GetThreadSelectorEntry
MapViewOfFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE