17a9eaab127fb36d3d1be219b426d918fbe55ef9faf3ccb98cb37593ea182f2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17a9eaab127fb36d3d1be219b426d918fbe55ef9faf3ccb98cb37593ea182f2b
Size

320KB
MD5

a1337b0c01d653654b2e5b26a47fae90
SHA1

059da25335b50f2da8018a796dac68a5a96c220d
SHA256

17a9eaab127fb36d3d1be219b426d918fbe55ef9faf3ccb98cb37593ea182f2b
SHA512

6669fa8ca3d0c3846e91c569d72f6f8722f094cef039bf3d64a669292ae4f2483dde99513f7202884da67ad679945e1525ce6e5e35f40e24fe6d04ad850aecec
SSDEEP

6144:sFix57wH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:sFix82EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

17a9eaab127fb36d3d1be219b426d918fbe55ef9faf3ccb98cb37593ea182f2b
.exe windows x86

9f49d780a5073243de03652810f3461a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
TermsrvAppInstallMode
FindFirstVolumeMountPointA
InterlockedPopEntrySList
GetSystemRegistryQuota
GetNumberFormatW
ExpandEnvironmentStringsW
IsBadReadPtr
GetHandleInformation
TryEnterCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE