de64628f2c40bef824eb5e3df09ed404aa8c86c98223d79b6c3916aa793856cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de64628f2c40bef824eb5e3df09ed404aa8c86c98223d79b6c3916aa793856cd
Size

320KB
MD5

a16fa80a129e54b7d133e4814cb60780
SHA1

c05f6fcc4a9c8c7530b5bc76e9cc7b10f07fb734
SHA256

de64628f2c40bef824eb5e3df09ed404aa8c86c98223d79b6c3916aa793856cd
SHA512

c8e98baae830fdf49468b252ccb1ca7b832eb2ef171400843887df5ed383ebe196a366e27faa16eb7995a4dce4e33d6d0990743c070f9ba1e7f0a73165789f6c
SSDEEP

6144:TZnOb1pC6h2kIBZ9H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:T5clh2kSd2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

de64628f2c40bef824eb5e3df09ed404aa8c86c98223d79b6c3916aa793856cd
.exe windows x86

c2ab6a6a7ac880d1d6a23886f9d9cdc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommState
EnumUILanguagesA
InterlockedDecrement
EnumResourceLanguagesW
SetConsoleIcon
NlsResetProcessLocale
InterlockedExchange
GetVolumeInformationA
GetCurrentDirectoryA
UTRegister
GetFirmwareEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE