1fffd20ed7cd083ee41c84987353894f5316185bed948a767983c44a3b77ca75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fffd20ed7cd083ee41c84987353894f5316185bed948a767983c44a3b77ca75
Size

320KB
MD5

23fcbb557f7948908040338773e690d0
SHA1

777a6d666004ed0a92f43911503ecc0c754ad086
SHA256

1fffd20ed7cd083ee41c84987353894f5316185bed948a767983c44a3b77ca75
SHA512

d48fff751b090b3cd7947ca2cc3fb928c4374af10bf506c40e8291248acab82ff4e7843639f159d134dbe93e363d17a9469ddfb323bb97255b536ee4ff230e62
SSDEEP

6144:B2009CR/kH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:B0Qa2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

1fffd20ed7cd083ee41c84987353894f5316185bed948a767983c44a3b77ca75
.exe windows x86

eb59df98a3174621405a2ce125cc146d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressW
GetSystemDefaultLangID
LZOpenFileW
OpenJobObjectW
LocalFileTimeToFileTime
WritePrivateProfileStringW
SetCurrentDirectoryA
CancelDeviceWakeupRequest
GetConsoleSelectionInfo
CreateProcessW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE