1a6fbfa97f9e5c20d9d0969eee2836bb8e29ec061f0b2328e83884e92c3f219c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a6fbfa97f9e5c20d9d0969eee2836bb8e29ec061f0b2328e83884e92c3f219c
Size

320KB
MD5

a0b9368bd1dc1d543386645c8e830e20
SHA1

d208e7b1ef0606e8a2a08fa65f577a4f81bb1af3
SHA256

1a6fbfa97f9e5c20d9d0969eee2836bb8e29ec061f0b2328e83884e92c3f219c
SHA512

b29353fb1183b44ba10a530e314016d3322bedddb77ddf0495743aec1580ac9225794e39c7d026a3e8a48245eb5712a224024364eb991c756a9d0ee666803fc7
SSDEEP

6144:BiyZeJpiRidTuH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:feOcdo2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

1a6fbfa97f9e5c20d9d0969eee2836bb8e29ec061f0b2328e83884e92c3f219c
.exe windows x86

e05a26f7517ecc0a8af4a32b604f5822

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryWin31IniFilesMappedToRegistry
GetNumberFormatW
BaseInitAppcompatCacheSupport
OpenConsoleW
lstrcmpA
GetCurrentProcessId
TerminateProcess
GetNumaHighestNodeNumber
RtlMoveMemory
FindNextFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE