def7ac27cfbc4383efa47d3c1af0009ef6124aab8cc4b03cfa604350a32b4618 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

def7ac27cfbc4383efa47d3c1af0009ef6124aab8cc4b03cfa604350a32b4618
Size

320KB
MD5

6e8fff830e3be99d870326be63b9d4f0
SHA1

f5a9bd44828b430e74d721ea77052a8a4fb74b74
SHA256

def7ac27cfbc4383efa47d3c1af0009ef6124aab8cc4b03cfa604350a32b4618
SHA512

f577c8d013edecf5a531b890704740cffaa993c260219d4f4648aa7ede7c0649f2251be2ccecb43df62ddff4246d053f3732466f2bcc95421e9aeef52580f678
SSDEEP

6144:7QRtZqOljpYJIH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:kbZtjpR2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

def7ac27cfbc4383efa47d3c1af0009ef6124aab8cc4b03cfa604350a32b4618
.exe windows x86

2f9e5f594cf68acea72f223190019c0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetVolumePathNamesForVolumeNameW
GetFileAttributesExA
GetModuleHandleExA
GetConsoleAliasExesLengthA
IsBadCodePtr
GetDllDirectoryW
ScrollConsoleScreenBufferA
IsBadStringPtrW
InterlockedPopEntrySList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE