3751a16fa9ed63a7f35ca75e8ee87e8a56215a6b2081bb93b8c977fe60700e68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3751a16fa9ed63a7f35ca75e8ee87e8a56215a6b2081bb93b8c977fe60700e68
Size

320KB
MD5

4c505a930c6afc1130dd9fed325fa7a0
SHA1

21a1c9d72ebe610d0be1dda759711f6986e6d882
SHA256

3751a16fa9ed63a7f35ca75e8ee87e8a56215a6b2081bb93b8c977fe60700e68
SHA512

48b0c8a813adf32146781dc789e65c85ee75a0f9fe53cf59a45924f458e11f63a6534aeeb664cb74c453f9e4bd33deb4bc59682a8da0f980b074645ed33622cc
SSDEEP

6144:5tgCZKf+5aDH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:5mCZKfRr2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

3751a16fa9ed63a7f35ca75e8ee87e8a56215a6b2081bb93b8c977fe60700e68
.exe windows x86

59a2cd48f7de82e7556d6881e375de88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursor
GetVDMCurrentDirectories
TermsrvAppInstallMode
LZInit
SetFilePointerEx
CancelWaitableTimer
lstrcpy
CreateProcessA
DebugBreakProcess
GetPrivateProfileIntA
FileTimeToDosDateTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE