f7977aeebd12f56e3c8cddf344c9bb9ccedafc2a484d1302158e9eea45b1ed9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7977aeebd12f56e3c8cddf344c9bb9ccedafc2a484d1302158e9eea45b1ed9d
Size

320KB
MD5

a083261ec428201c7c5e168ab1d00030
SHA1

0b621de4c2e5aa248144900e5448c9b8d0996159
SHA256

f7977aeebd12f56e3c8cddf344c9bb9ccedafc2a484d1302158e9eea45b1ed9d
SHA512

a01036981c50c00e37bcefc905db16144f8f3441808d9eff17c747f25a8318862e47ed4707b913b39d4b4f80b368bf1212a72cfe9e381012fb03d57b45f020aa
SSDEEP

6144:opbNyH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:o42EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f7977aeebd12f56e3c8cddf344c9bb9ccedafc2a484d1302158e9eea45b1ed9d
.exe windows x86

2a767f65a5d9465ce80511deb73cee51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAllocEx
GetConsoleAliasW
CreateDirectoryA
LocalAlloc
ReplaceFileW
InterlockedExchange
GetConsoleAliasExesLengthW
TerminateJobObject
GetConsoleAliasExesLengthA
ReadConsoleOutputAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE