aa156f8fe8470327d955ba8a15346da962b8977851c8cb00d0ed279d4d3908f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa156f8fe8470327d955ba8a15346da962b8977851c8cb00d0ed279d4d3908f5
Size

320KB
MD5

a108a1a670995e9b0b2c5c6ab2bc7690
SHA1

0325d4dcef71c70c9479d9ff2e6abad2ba71ab58
SHA256

aa156f8fe8470327d955ba8a15346da962b8977851c8cb00d0ed279d4d3908f5
SHA512

009a7fc6bf18a6b4190ed3997e3e7d5393f737327f5e8bc0a7b8afa3b387c0d776697ae54555d6088d3f1012a2541d23a174a48c3dd118cc3926bfdbbfdee52b
SSDEEP

6144:QR/6MWkMaW74/H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:o4RaZv2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

aa156f8fe8470327d955ba8a15346da962b8977851c8cb00d0ed279d4d3908f5
.exe windows x86

cce135b4b6bdfdb8c2d624a68a47de43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesW
GetCurrentThreadId
Heap32First
GetComputerNameExW
InitializeCriticalSectionAndSpinCount
WTSGetActiveConsoleSessionId
HeapExtend
ReadFileScatter
VirtualProtectEx
CloseProfileUserMapping

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE