e34d92cd9c451beccf1c199d701709e75fcecca549bfee4708a0dd69794cd794 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e34d92cd9c451beccf1c199d701709e75fcecca549bfee4708a0dd69794cd794
Size

320KB
MD5

a0ad5f4178836fb0fe1f4cc6a99b8ef0
SHA1

7dd779f8b5637a5a9b80f1e6e99d4678506ecf9b
SHA256

e34d92cd9c451beccf1c199d701709e75fcecca549bfee4708a0dd69794cd794
SHA512

78f181cc9a5fdd5f50537198ee8924cd1b92fa237fa3e8a6ce664e78def1caf73f4eb16f4d384d5dc658be79d2e979e1a0134a05c22135f5dfcbc6a2bd5a767b
SSDEEP

6144:U/pR3mtzx3wH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:LVxm2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

e34d92cd9c451beccf1c199d701709e75fcecca549bfee4708a0dd69794cd794
.exe windows x86

0bff4d9cc1897c55e57a1ffcd58dc957

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
RegisterConsoleVDM
GetNumaProcessorNode
SetConsoleCursor
CreateProcessInternalW
GetProfileStringA
WaitNamedPipeW
GetGeoInfoA
SetComputerNameA
GetLogicalDriveStringsW
FindActCtxSectionStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE