1744389ac01fbcd841cb9e7b64da30d92c50b3cf4ccd07d5062cf4dc730e370b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1744389ac01fbcd841cb9e7b64da30d92c50b3cf4ccd07d5062cf4dc730e370b
Size

320KB
MD5

a0c54cccf6f484fd6c57ace73a05bd60
SHA1

eab8c417457021dd1fe3ab67927f2dfef1a719e4
SHA256

1744389ac01fbcd841cb9e7b64da30d92c50b3cf4ccd07d5062cf4dc730e370b
SHA512

13329b1f262d7c96927fd93cc77cff3d80b59f99869f3095f2caa8cd6ecd5d3c2ff6d42731dc8cdde966bb7720c154572d0c15fcc41ef73c38ff0648289b942e
SSDEEP

6144:4a+chtpoNH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:4uLe2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

1744389ac01fbcd841cb9e7b64da30d92c50b3cf4ccd07d5062cf4dc730e370b
.exe windows x86

0267e122d77bb032c3baf584b0bad0f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointW
ProcessIdToSessionId
GetComputerNameExA
IsDebuggerPresent
ReadConsoleInputW
FreeConsole
FindVolumeClose
lstrcmpiA
GetConsoleHardwareState
SetConsoleCursor
GetCommModemStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE