936118a75cc1851826b0ffeaa3a6a00017fa51b0cb51c54d119127dba1cac89d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

936118a75cc1851826b0ffeaa3a6a00017fa51b0cb51c54d119127dba1cac89d
Size

320KB
MD5

a239044c54e6e8198d546f6dc9031a00
SHA1

58d7c67095afa1642ea23a583efb9aee6fa5e08a
SHA256

936118a75cc1851826b0ffeaa3a6a00017fa51b0cb51c54d119127dba1cac89d
SHA512

bf2584e3f08ce0f21478cf0ccffe4d6b41937381c01a42da45de733fea17010ee0d116f87da0bae5a32bb018fb0e5aacc70fca57d7049c821229714656381518
SSDEEP

6144:VoTsUWfla6H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:qsXb2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

936118a75cc1851826b0ffeaa3a6a00017fa51b0cb51c54d119127dba1cac89d
.exe windows x86

873df9c27c4acc9a74eb261dcfa7e0d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
EnumTimeFormatsW
OpenEventA
FatalAppExitW
Heap32ListFirst
AssignProcessToJobObject
GetBinaryType
VirtualProtectEx
WriteProfileStringW
RemoveLocalAlternateComputerNameW
VerifyVersionInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE