54bab898c211e390e8fc5cc24d80d644c96a72bb955963320338d098b4ebf106 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54bab898c211e390e8fc5cc24d80d644c96a72bb955963320338d098b4ebf106
Size

320KB
MD5

a22aac47b451bed5b43161fabbce0650
SHA1

a5c059ad91096ecc29bf00c4b4339695c9108960
SHA256

54bab898c211e390e8fc5cc24d80d644c96a72bb955963320338d098b4ebf106
SHA512

1dbf28061ee0eb615dc1d0692d6b62e159526c7106a242fb0ab4d7de87ba98342b223d5662848e9c6fce7ea41bcb55c263609be95db6d54a1522f3d494d12165
SSDEEP

6144:CLPnwvp5lScH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:CL/wpB2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

54bab898c211e390e8fc5cc24d80d644c96a72bb955963320338d098b4ebf106
.exe windows x86

0949f4e17e06cf212a31b5e530600d72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueueUserWorkItem
SetNamedPipeHandleState
SetConsoleMenuClose
SetFirmwareEnvironmentVariableW
ValidateLCType
SuspendThread
FindFirstVolumeMountPointW
DeleteVolumeMountPointW
GetConsoleNlsMode
GetLongPathNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE