d5b9880d5f2fc3a35bd21138b72e0b316337f389348d114b83aa339e0502ae5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5b9880d5f2fc3a35bd21138b72e0b316337f389348d114b83aa339e0502ae5d
Size

320KB
MD5

a20481979d4e5a0e4d417b87c7160330
SHA1

18b2f93387360d4009b5285eb085a004555433d6
SHA256

d5b9880d5f2fc3a35bd21138b72e0b316337f389348d114b83aa339e0502ae5d
SHA512

c8ad3177fd8e9878314822e7c2288429d714c3561ba657dd7c5765fd38e99a36798e870c4ed324d82ef1b0c175388680a96290363eb1bf6e6d2929c2dfc8455d
SSDEEP

6144:kgcquofMAH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:kg2ofMG2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

d5b9880d5f2fc3a35bd21138b72e0b316337f389348d114b83aa339e0502ae5d
.exe windows x86

980e74cac2a548dfbbd1c6d39f1ef15d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapUserPhysicalPages
SetCurrentDirectoryW
GetConsoleMode
OpenThread
lstrcpynA
UnhandledExceptionFilter
ConvertThreadToFiber
FindActCtxSectionGuid
IsValidCodePage
lstrcmpA
GlobalGetAtomNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE