354e3f199b2773a7639dfa5e63628a8dbc4a885c994a06ad1c7b8d3b567d127d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

354e3f199b2773a7639dfa5e63628a8dbc4a885c994a06ad1c7b8d3b567d127d
Size

320KB
MD5

02d10edc396012ca2f5e5f4ad7d05900
SHA1

472663dc6fb4fda71f55b65b03410ff72cebe3ec
SHA256

354e3f199b2773a7639dfa5e63628a8dbc4a885c994a06ad1c7b8d3b567d127d
SHA512

b72fcbb0a32e8645726b498c435be1b5221a70848fef1cc3c8ef7ffcf72adf241efa56c2582643b0f12410fbd137dedcf6aa7a062df187632dcd7ce39a55e64e
SSDEEP

6144:6aPmoaDlyCTiH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:RPwDA2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

354e3f199b2773a7639dfa5e63628a8dbc4a885c994a06ad1c7b8d3b567d127d
.exe windows x86

c0b370a4f6ee201ddf2d750a6d846c8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
VerifyConsoleIoHandle
FindFirstFileExA
IsWow64Process
InterlockedDecrement
GlobalFindAtomW
GetModuleFileNameA
ValidateLocale
GetConsoleAliasesLengthA
EnumLanguageGroupLocalesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE