3a9f54c7848cc81ae98f2c9df0284adc4aba5642163faea05ba32d99f314b8c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a9f54c7848cc81ae98f2c9df0284adc4aba5642163faea05ba32d99f314b8c9
Size

320KB
MD5

65e33aaed179617bb66e5e247a2afc70
SHA1

3766e303ebe21b02680282d91e9357c38aa7379e
SHA256

3a9f54c7848cc81ae98f2c9df0284adc4aba5642163faea05ba32d99f314b8c9
SHA512

20c7f995ba43de5ce64350c3a950557a4f502b57dc7584abfe07b424ef3fbf99846c694b93a1f53aa6879392afcf1251942066782f310fbe7003c54421b85fdc
SSDEEP

6144:xy+1HtqgX8H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:xna2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

3a9f54c7848cc81ae98f2c9df0284adc4aba5642163faea05ba32d99f314b8c9
.exe windows x86

b4c98c42c946d663368e627560d37f16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessAffinityMask
SetInformationJobObject
CreateTapePartition
FindAtomW
GetVolumePathNamesForVolumeNameW
WinExec
WaitNamedPipeW
SetThreadContext
BaseProcessInitPostImport
ExtendVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE