494afa414163634695b836239d0ed49db709b79eca801fab14f8fb3822b2ec59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

494afa414163634695b836239d0ed49db709b79eca801fab14f8fb3822b2ec59
Size

320KB
MD5

a0b8535265960bbbe3c6215fe794dc10
SHA1

efde9404b5bad69203e4267aaa4447c3163114a5
SHA256

494afa414163634695b836239d0ed49db709b79eca801fab14f8fb3822b2ec59
SHA512

6beebdf3f49fb08ce91113706fa5e4d0ba9d0d88afcc44073bd7f7d942705e3af64a40429c2165998ec553aa1507b5eac162026520d95e6fff09535bf7bb5961
SSDEEP

6144:ARYPQnHzSjBH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:jim12EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

494afa414163634695b836239d0ed49db709b79eca801fab14f8fb3822b2ec59
.exe windows x86

dc6969bfc4a985cb57ce593502c50b88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lopen
IsProcessorFeaturePresent
SetTapePosition
GetSystemDirectoryA
HeapWalk
WriteConsoleOutputAttribute
GlobalCompact
AddConsoleAliasA
SetConsoleOS2OemFormat
SetTapeParameters
PrivMoveFileIdentityW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE