111c633d632dbdc4bb4e81df73728102e8ce1074c835126c1a5610aef65fb68d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

111c633d632dbdc4bb4e81df73728102e8ce1074c835126c1a5610aef65fb68d
Size

320KB
MD5

5eee489dd947e04b6be605f13e35d200
SHA1

2199c4c703ff745bfc2f0474b99f6c6bb0970a19
SHA256

111c633d632dbdc4bb4e81df73728102e8ce1074c835126c1a5610aef65fb68d
SHA512

17ba61bf347e29b13ab766bfed2bba2d2504a518a11aee3dd618daf2ffc68df6d986c4389a90d65ed04d62bab4537743343a2105e02c63f90e051efc224752a9
SSDEEP

6144:TmnlgSqQsq4H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:ylgSqQhu2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

111c633d632dbdc4bb4e81df73728102e8ce1074c835126c1a5610aef65fb68d
.exe windows x86

e51f250394480501e7ac45ab48e527e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteTimerQueueEx
GetFileAttributesExA
GetConsoleAliasExesA
GlobalUnlock
GetCommProperties
SuspendThread
ReadProcessMemory
SetThreadContext
FormatMessageW
GetConsoleWindow
SetTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE