19c06fbb51409156dfac0bb89e51a8d00d3c4fd64fc0d543a24eec98e84ef96e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19c06fbb51409156dfac0bb89e51a8d00d3c4fd64fc0d543a24eec98e84ef96e
Size

320KB
MD5

a19b2ea2d7327672af339f6031cc6be0
SHA1

6d1c6b08c7d33b45aae4a34fb722993993dc3e8a
SHA256

19c06fbb51409156dfac0bb89e51a8d00d3c4fd64fc0d543a24eec98e84ef96e
SHA512

aec5b9c47c447016ea4e8061262306244717b2eda17fce077f6512c179156d0fe5f0199b141ca387e925ab546d8b474ee605ffe33d37c382d43f658666074fc4
SSDEEP

6144:x1PlWJqIZ/H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:jtWJRv2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

19c06fbb51409156dfac0bb89e51a8d00d3c4fd64fc0d543a24eec98e84ef96e
.exe windows x86

412a9290eb051c43c36de11f09aa77a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapUserPhysicalPages
GetPrivateProfileSectionA
lstrcpyA
DuplicateHandle
ExpandEnvironmentStringsA
OpenThread
CreateDirectoryA
IsDebuggerPresent
DeleteVolumeMountPointA
CreateProcessW
HeapLock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE