fed92cf02c7e33ecfb558eda84ed50d491619f4683bfcda5a472be7360afaceb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fed92cf02c7e33ecfb558eda84ed50d491619f4683bfcda5a472be7360afaceb
Size

320KB
MD5

a2429e3bb82f43e41d90b27878a65cc0
SHA1

2b7fc51ed43994571f2208edd1065001e25a34bf
SHA256

fed92cf02c7e33ecfb558eda84ed50d491619f4683bfcda5a472be7360afaceb
SHA512

94c16b27e3972057ce9640fe5799e1edd8f65b257bacc796c91668e8b5bc0d287604d1aee989b1a3646ee77605010dafb7fc70fd515534f402b194e0bc502ec3
SSDEEP

6144:cnh4xOOvlLmAZrruqH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:8OvdmAI42EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

fed92cf02c7e33ecfb558eda84ed50d491619f4683bfcda5a472be7360afaceb
.exe windows x86

2998cd7502e80708d6206a55639c28b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventW
CreateMailslotA
SetClientTimeZoneInformation
GetVolumePathNamesForVolumeNameA
ZombifyActCtx
GetConsoleAliasExesA
GetFileAttributesExA
GetConsoleAliasW
CopyFileExW
QueryActCtxW
EnumSystemLanguageGroupsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE