2350e5b6d0a05a641b12a0a0f9250622956ab14d2210ce2d7374f62c5e387d1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2350e5b6d0a05a641b12a0a0f9250622956ab14d2210ce2d7374f62c5e387d1b
Size

320KB
MD5

691ef7972f6e9ccf629b6d82d05bfc20
SHA1

20b798783adb345579b1e1033b034befc977d732
SHA256

2350e5b6d0a05a641b12a0a0f9250622956ab14d2210ce2d7374f62c5e387d1b
SHA512

f9e9f02ff2e2016ead27f494ead09f047151c86a6fafa93eb9449e8bca30834dc38267455241e8f5733b4624decf22fa40bee997c59c394c9f85babf0180a1e0
SSDEEP

6144:m63KbFH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:m6cV2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

2350e5b6d0a05a641b12a0a0f9250622956ab14d2210ce2d7374f62c5e387d1b
.exe windows x86

95e44ff4a571e2d4bb5aa1b021e0f846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConvertThreadToFiber
RtlUnwind
GetLongPathNameW
ExtendVirtualBuffer
GlobalFindAtomW
ReadFile
UnregisterWait
lstrlenW
CheckNameLegalDOS8Dot3W
CreateFiber
GetTapePosition
SetNamedPipeHandleState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE