9697f593141d969570d389156bad4afae4920cf08588e5ceb29eba988550578d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9697f593141d969570d389156bad4afae4920cf08588e5ceb29eba988550578d
Size

501KB
MD5

106f9926d6635fee8a07fc203897f480
SHA1

886825f48a244bb8a93fc9ed20022cb46a3015d6
SHA256

9697f593141d969570d389156bad4afae4920cf08588e5ceb29eba988550578d
SHA512

c92d3d8e1ad3902ac47e53b8eac72e6b7ee6b404f9049b893c66a87c26499f266365df417c3a03a6c38c87d041d2f97363afaa292124cb5c742f0c2833b6cc80
SSDEEP

6144:qJv9+nTt/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOHP9DgPa:TSjJ7oaz33O6euNC8+Zwp5k6

Score

N/A

Malware Config

Signatures

Files

9697f593141d969570d389156bad4afae4920cf08588e5ceb29eba988550578d
.exe windows x86

3ca8f576d4c402def7c358a7c7f874a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryA
GetFirmwareEnvironmentVariableA
IsProcessInJob
ConvertThreadToFiber
_llseek
HeapExtend
CreateJobObjectA
IsProcessorFeaturePresent
BeginUpdateResourceW
RequestDeviceWakeup

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE