ff1b4494ba9a305412873f4dde6984e603270298dcdae876c072728eab103908 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff1b4494ba9a305412873f4dde6984e603270298dcdae876c072728eab103908
Size

320KB
MD5

a047ac5fe6279a2a80b3e7d716718e80
SHA1

7d082308138aad61a24b104d686804f39c8bb58f
SHA256

ff1b4494ba9a305412873f4dde6984e603270298dcdae876c072728eab103908
SHA512

58d1e073e9fb804d080457287745b0e6c98a7a1e3fe89f43dda917497bf3116c294f04d9624ded12f3f4cb496920627c78f4c887e4add33fda7d2c175737d59b
SSDEEP

6144:pF+jh4qoH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:OjhTe2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

ff1b4494ba9a305412873f4dde6984e603270298dcdae876c072728eab103908
.exe windows x86

9904dcf7e9be8f7f13b32362765dd8c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
ContinueDebugEvent
ReadConsoleOutputCharacterA
VDMConsoleOperation
GetConsoleTitleA
EnumResourceLanguagesA
GetPrivateProfileStructA
SetConsoleCommandHistoryMode
TzSpecificLocalTimeToSystemTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE