044f89495a1aaf7f9e2ddcfa726ef63465252f511981087d6c1292f2a471160b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

044f89495a1aaf7f9e2ddcfa726ef63465252f511981087d6c1292f2a471160b
Size

320KB
MD5

a15f6a1112ffd4f6e1631c2241f7d7b0
SHA1

5e0eb7d38c56f33e153d325b567ca5544444b9ec
SHA256

044f89495a1aaf7f9e2ddcfa726ef63465252f511981087d6c1292f2a471160b
SHA512

0a947fad87c44cc473f7f01946d1b3a0e49eeb39e6611dba94c1a9edb548d66cd261fd4d2589f62ad38a344f9938a8978bb3e95c75fc932c3158a12d9def3ba8
SSDEEP

6144:ICSjZ/VBzLH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:PyZ/D2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

044f89495a1aaf7f9e2ddcfa726ef63465252f511981087d6c1292f2a471160b
.exe windows x86

e60a59c012e28ccf69aede9dba91bbc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
DeleteTimerQueueEx
GetConsoleKeyboardLayoutNameA
BindIoCompletionCallback
SetHandleContext
GetUserDefaultLangID
LocalAlloc
FindAtomW
GetProcessId
SetSystemTime
GetCurrentThreadId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE