b05a11cf8b55a3fb86b2db11dedb318d7f181cf8c1e3d65664f3848cfa3161c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b05a11cf8b55a3fb86b2db11dedb318d7f181cf8c1e3d65664f3848cfa3161c2
Size

320KB
MD5

31e9035578cc098fd967c0f82cba4d50
SHA1

1c897fa85464c0b8a71de08bfd9588b1cf610741
SHA256

b05a11cf8b55a3fb86b2db11dedb318d7f181cf8c1e3d65664f3848cfa3161c2
SHA512

2e2cd54aa626d038566eb07d33e322be2bdd6f004fb89d1e4ccf2f118e2c363b794339070a7d09ee3c1afebdaa0edf072b338f0e46ccd09c354ea8afd571a48d
SSDEEP

6144:XHSUm6olDFqnH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:XynXW2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

b05a11cf8b55a3fb86b2db11dedb318d7f181cf8c1e3d65664f3848cfa3161c2
.exe windows x86

1c169bb8eac6babbeb4b843915d65bae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessId
lstrcmpA
FindAtomA
SwitchToThread
DecodeSystemPointer
MoveFileExW
FindActCtxSectionStringW
WriteConsoleOutputA
LZInit
FindNextVolumeMountPointW
FreeEnvironmentStringsW
AddConsoleAliasW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE