c1ff06dcc8c7812c6f358d3232025b67bcdf771c14cffd87e03099eeebaab790 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1ff06dcc8c7812c6f358d3232025b67bcdf771c14cffd87e03099eeebaab790
Size

320KB
MD5

a25d5ff95541facea233ef16424c29d0
SHA1

81733f407db558fc3bc2516821c3463517962a17
SHA256

c1ff06dcc8c7812c6f358d3232025b67bcdf771c14cffd87e03099eeebaab790
SHA512

4dbd3df95025ac0dcf4aacc109a1d964db7b44746d8f8969a5088d6264e7d5b502fa8cf5a08d51a4b00aecae656b5f9933f9b671cd0c5f6ad41a2bcf01d5b37b
SSDEEP

6144:iuMZ+qMOH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:iuMZ+qM02EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

c1ff06dcc8c7812c6f358d3232025b67bcdf771c14cffd87e03099eeebaab790
.exe windows x86

f711e74394a4a8d88b6aec159442d695

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RequestDeviceWakeup
ConnectNamedPipe
CopyFileExW
MulDiv
GetSystemDirectoryA
IsBadReadPtr
HeapLock
GetCommMask
InterlockedPopEntrySList
Thread32First
LZClose
GlobalFix
FindNextVolumeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE