fa3f4311ac13bdab96516d82aa3235cefd631d597eb7e1ec6a3ef92eb41aef00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa3f4311ac13bdab96516d82aa3235cefd631d597eb7e1ec6a3ef92eb41aef00
Size

501KB
MD5

81b6045d76eb918cc42d5a4ef367e470
SHA1

a17ad296bc66c8e54b26d8d8dee8700c2b68b618
SHA256

fa3f4311ac13bdab96516d82aa3235cefd631d597eb7e1ec6a3ef92eb41aef00
SHA512

34ed7ec28e848f4c6bdfc72c0d767afdca51d45fee1e20f5bd8adf9281ee1759299f6dbe40414f4a8b9d780d6134e7750edcc727f6447df964b88536e70ef18b
SSDEEP

6144:Q5VeGEynbyDDWg/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOj:T7DW5jJ7oaz33O6euNC8+Zwp5k6

Score

N/A

Malware Config

Signatures

Files

fa3f4311ac13bdab96516d82aa3235cefd631d597eb7e1ec6a3ef92eb41aef00
.exe windows x86

71da3dd918f6146aefb05dab50fe9e42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleMaximumWindowSize
InterlockedPushEntrySList
OpenConsoleW
Process32First
DeleteVolumeMountPointA
CreateProcessInternalWSecure
GetNumberFormatA
SetProcessWorkingSetSize
InitializeCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE