1f536d9eebe3c4972d13871e84e4688dca52195183897da48b4f17c7c2956cd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f536d9eebe3c4972d13871e84e4688dca52195183897da48b4f17c7c2956cd7
Size

320KB
MD5

a197b76b80a0cc1d44475f58abad59e0
SHA1

c85108cd428319d388a0357b525502309bfacb3b
SHA256

1f536d9eebe3c4972d13871e84e4688dca52195183897da48b4f17c7c2956cd7
SHA512

e73f4874b6275684ce6d355ff0f23a53d5c4bf4f053a39f4a217fccc0abc4d4fd5320ef1749db8cae14477854d7972b095afe122e3dbd7d08bb49d92f30b1c67
SSDEEP

6144:JUebBjGNH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:JDlE2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

1f536d9eebe3c4972d13871e84e4688dca52195183897da48b4f17c7c2956cd7
.exe windows x86

3e23cbad79bfaee1f679b1d7d4deb7e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VDMOperationStarted
GetComputerNameW
WaitNamedPipeW
GetQueuedCompletionStatus
SetInformationJobObject
DuplicateConsoleHandle
HeapCreateTagsW
BuildCommDCBAndTimeoutsA
GetLongPathNameW
GetStdHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE