05e40cda70527c0f210c3a7b191992b6100f034263263205d6cab52086f891aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05e40cda70527c0f210c3a7b191992b6100f034263263205d6cab52086f891aa
Size

320KB
MD5

a20e809f63e0942a724aa1eda712f5c0
SHA1

18a2b9b964f4333396f61561a89311a433bf9511
SHA256

05e40cda70527c0f210c3a7b191992b6100f034263263205d6cab52086f891aa
SHA512

2c2d7ec571142796ebda596df29d3d7d3cc091979adb0aa311589db38f61f9663cd852c06066a3ef5e4d0c2432a9610864991d0e724b5edc7abd48cbbdad972c
SSDEEP

6144:ToV+QLd0JTeXVH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:5QLd+yV2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

05e40cda70527c0f210c3a7b191992b6100f034263263205d6cab52086f891aa
.exe windows x86

ee92cf17e6d8cde76aa3cc898a07048f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMemoryResourceNotification
GetQueuedCompletionStatus
SetThreadContext
lstrcpynW
OpenWaitableTimerA
WriteFileGather
SetFirmwareEnvironmentVariableA
GetNumaNodeProcessorMask
GetQueuedCompletionStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE