ad0b1b94ac5a6fb36061033a6857ee2f692d22ad573feb5bbb746a270840e106 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad0b1b94ac5a6fb36061033a6857ee2f692d22ad573feb5bbb746a270840e106
Size

320KB
MD5

a09957eb204d2851c01c0b8130f0c430
SHA1

c612b6e9c221fc7620d9013474005fc924ba33eb
SHA256

ad0b1b94ac5a6fb36061033a6857ee2f692d22ad573feb5bbb746a270840e106
SHA512

be9f690ebf3295f6372be450d387d3a25746688dc3e4312a8dbc50c17f5293ff9fa6bea9ce583f36855a4048da32d7f10a24fa77e1f6585e4545c8877e3a60a3
SSDEEP

6144:vvtg3VrYEdH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:grYE92EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

ad0b1b94ac5a6fb36061033a6857ee2f692d22ad573feb5bbb746a270840e106
.exe windows x86

5ea2ecc4f66216b1a558b6b1bb3480b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWaitForInputIdle
AssignProcessToJobObject
RegisterConsoleVDM
RemoveLocalAlternateComputerNameW
CreateWaitableTimerA
GetUserGeoID
HeapSummary
GlobalAddAtomA
DeleteFileW
DuplicateConsoleHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE