fb17348a47982e73347fb405198884c50644aa3072de34b919f6174a1683e9d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb17348a47982e73347fb405198884c50644aa3072de34b919f6174a1683e9d4
Size

320KB
MD5

a10f8d35aa2904caa8b8aafcdc566840
SHA1

cb440269808c3570c06b954b68672ab68ed3b314
SHA256

fb17348a47982e73347fb405198884c50644aa3072de34b919f6174a1683e9d4
SHA512

79fb7ce17b66cc94a3e820934a5377fd92908e5275b657d52aa104f64b5f4d9f6fd8fdfc8c3a3be1c4f7f54f026a9663946ba9e37e6190629ead7000f9fb3067
SSDEEP

6144:KAZkpkPzrWH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:KA/02EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

fb17348a47982e73347fb405198884c50644aa3072de34b919f6174a1683e9d4
.exe windows x86

0bf8dfc81276f3457ec88a36ac3fcbbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
RegisterWowExec
GetExpandedNameW
ExpungeConsoleCommandHistoryW
GetNativeSystemInfo
GetConsoleCommandHistoryLengthA
GetWindowsDirectoryW
GlobalFlags
DnsHostnameToComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE