656fb9b83f38de38253847e649cfdbe897916c0fd7f1de759dfb72d3aa196973 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

656fb9b83f38de38253847e649cfdbe897916c0fd7f1de759dfb72d3aa196973
Size

320KB
MD5

a1d681db7080fcdb7339ee2b702f8f20
SHA1

1b3d0c51724d8bbbad1142734ce13a24f736709a
SHA256

656fb9b83f38de38253847e649cfdbe897916c0fd7f1de759dfb72d3aa196973
SHA512

47b7d73eb5baccf8cff3482d78535169e34326917ed63be7629eb9b01e606acbb6eebc3ee291fb26c0755a9ecd180be96aac9a9f65576d151703f79a4a0a78fc
SSDEEP

6144:KcJQJrH7H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:KKQJrT2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

656fb9b83f38de38253847e649cfdbe897916c0fd7f1de759dfb72d3aa196973
.exe windows x86

8588da3329d137a4884aa5862990d219

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryWin31IniFilesMappedToRegistry
GetComputerNameA
SetConsoleNlsMode
OpenEventW
GetProcAddress
SetErrorMode
GetLinguistLangSize
GetEnvironmentStringsW
FindNextFileA
QueryInformationJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE