6d244eaa3bb788b59c442ee7f6346d13dc322afbd0cc0a7a92f3aaab00ee9d6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d244eaa3bb788b59c442ee7f6346d13dc322afbd0cc0a7a92f3aaab00ee9d6c
Size

320KB
MD5

a11c0ea978104a83be10e30ac566d1f0
SHA1

47bd66337fac3e46312a1e3a35c0603040fe7d25
SHA256

6d244eaa3bb788b59c442ee7f6346d13dc322afbd0cc0a7a92f3aaab00ee9d6c
SHA512

3eb2f0f49e919320a1bdfd0701bbca8b08ee39d0418142f6bc492dd9968e29b8d00187fefee830419af1885819183007c6f7d41d41f609a41726489cb88cd219
SSDEEP

6144:dE6061vj7H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:+Gjz2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

6d244eaa3bb788b59c442ee7f6346d13dc322afbd0cc0a7a92f3aaab00ee9d6c
.exe windows x86

40fce7c1a0563c316fbe091590ac80cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursorMode
ReadFile
SetEnvironmentVariableW
QueryInformationJobObject
GetCurrentConsoleFont
OpenFileMappingW
QueryActCtxW
WaitForMultipleObjectsEx
GetFirmwareEnvironmentVariableA
AssignProcessToJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE