c2d679684aeb2c6abe18407dc21d60bcaed1f972f5e8a581214575d7ea9cc9b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2d679684aeb2c6abe18407dc21d60bcaed1f972f5e8a581214575d7ea9cc9b5
Size

320KB
MD5

5dfb94544bc9fd575a77772889be1f60
SHA1

fc9cdf18acb12e642c4df52d7f5fb2d94a240bf3
SHA256

c2d679684aeb2c6abe18407dc21d60bcaed1f972f5e8a581214575d7ea9cc9b5
SHA512

82edf27cf5225daff46c8dc8db9a048bfbe9b2c2a7c043e35f5cfe93b4e40955419fc4a3a8ce97ea1335c3ee4b4b9cceec424c112f84e378eb0dfd4fc221fc5d
SSDEEP

6144:dI2f60RfH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:dI2f60RP2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

c2d679684aeb2c6abe18407dc21d60bcaed1f972f5e8a581214575d7ea9cc9b5
.exe windows x86

43686f3537f61c16e42d8f62ff1883eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeactivateActCtx
WriteProcessMemory
GetCurrentThread
FindClose
GlobalAddAtomA
FillConsoleOutputAttribute
FindNextChangeNotification
ActivateActCtx
SetProcessWorkingSetSize
ExpungeConsoleCommandHistoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE