4fc0f06e45a3c886d531687f5d9bab3cc587383af01b050dece8a5d0e4031832 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fc0f06e45a3c886d531687f5d9bab3cc587383af01b050dece8a5d0e4031832
Size

320KB
MD5

a0db60ff1b11b79a076865c8efd68280
SHA1

00083281c01df86e337cf368ed94e3d54e59ed7d
SHA256

4fc0f06e45a3c886d531687f5d9bab3cc587383af01b050dece8a5d0e4031832
SHA512

1fe10e95fd476598e7d78bc3211dd366372192476f108f0cf3d33538762d0095e2f5ada5a94d278dc563477a2dfae357a1100f4ddb3b0be1d492db9d0fbdce50
SSDEEP

6144:5iNsV7bMUH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:wipMy2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

4fc0f06e45a3c886d531687f5d9bab3cc587383af01b050dece8a5d0e4031832
.exe windows x86

02710b240ac15b7ca0893fcbd13653f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToFiber
IsValidLanguageGroup
EnumResourceNamesW
GetSystemDefaultLCID
GlobalWire
DebugSetProcessKillOnExit
GetConsoleAliasExesW
GetExitCodeProcess
ReplaceFile
UnregisterConsoleIME
GetCurrentConsoleFont

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE