f23dc605cfec4721e8dd38a0b928221764d2556e14b8711d7e01d05ee0c1df22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f23dc605cfec4721e8dd38a0b928221764d2556e14b8711d7e01d05ee0c1df22
Size

320KB
MD5

a12aa5049523042c07d1fe819a7cd8d0
SHA1

ad8c1072215fe515f58cacc8568b80fac57ad453
SHA256

f23dc605cfec4721e8dd38a0b928221764d2556e14b8711d7e01d05ee0c1df22
SHA512

ecc885848ed1ca7aa164a2f453a99fd91009bb8325aa1ff61b3a0db5b4440136c33ed7ecef3d4428d2e39c5ec8840c615a66938d7ad6bb62084280a4fa7dc5b9
SSDEEP

6144:MK9JeluhPH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Guh/2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f23dc605cfec4721e8dd38a0b928221764d2556e14b8711d7e01d05ee0c1df22
.exe windows x86

ca7d6b2b045cd046fca5143e341897c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Toolhelp32ReadProcessMemory
GetFileSize
GetCPFileNameFromRegistry
RequestDeviceWakeup
GetNumberOfConsoleFonts
UnregisterWaitEx
FindNextVolumeMountPointW
VirtualQuery
DefineDosDeviceA
FindNextVolumeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE