c96f870490c6499cb4215bbaebebba95716d3d1738975febc2a5f9d79f27637c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c96f870490c6499cb4215bbaebebba95716d3d1738975febc2a5f9d79f27637c
Size

320KB
MD5

a1775f6acb641d5559bb5ec0e0870cf0
SHA1

4bdf3881af8271be5e3ed8e2bfff8f225ed19075
SHA256

c96f870490c6499cb4215bbaebebba95716d3d1738975febc2a5f9d79f27637c
SHA512

7af19ee844e0b9694ccf7217c04afa4f181b067549885c4a35135b05c2269d9e54bfd3bb71878fdbb1c22d65b079b2d9dd7ab93746daf92c609a77da6c08e590
SSDEEP

6144:vxGP2NFH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:vBV2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

c96f870490c6499cb4215bbaebebba95716d3d1738975febc2a5f9d79f27637c
.exe windows x86

fc5b9a02dcf221950c858c6e43ffb792

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetDiskFreeSpaceA
CreateActCtxA
BaseInitAppcompatCacheSupport
InterlockedExchangeAdd
IsBadWritePtr
GetProfileStringA
SetConsoleInputExeNameW
GetAtomNameW
GetCurrentProcessId
WriteConsoleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE