db656c34db263503e9ff584a227b70694b4374fabebb3ba417bec2c3e6cf6ffc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db656c34db263503e9ff584a227b70694b4374fabebb3ba417bec2c3e6cf6ffc
Size

320KB
MD5

a1132b76c22c112a6e9630f18e4f5710
SHA1

a0fc0f6a8e26e7002b32986b7caf008f21d8bbfb
SHA256

db656c34db263503e9ff584a227b70694b4374fabebb3ba417bec2c3e6cf6ffc
SHA512

9361c78918dd05b72edd20de120a5d9edf3f615aedf73177423ccae3b6c056079e3429bf73430c7dd4a1b1a42f8619b0574f2cdb86aa55fe14b53b1da0e2e3bc
SSDEEP

6144:HCHoI0k8myWZH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:O0/K2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

db656c34db263503e9ff584a227b70694b4374fabebb3ba417bec2c3e6cf6ffc
.exe windows x86

aa4d07454fb12d14585a76d6a146b6ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetStringTypeExW
SetThreadIdealProcessor
QueryDosDeviceW
GetCurrentThreadId
ExpandEnvironmentStringsA
SetEnvironmentVariableA
GetVDMCurrentDirectories
ConnectNamedPipe
lstrlenW
FindResourceExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE