f4fe082b4ce123a24234da9a757ccd8873babbc9f168baff77e0deb73ea5f7d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4fe082b4ce123a24234da9a757ccd8873babbc9f168baff77e0deb73ea5f7d3
Size

320KB
MD5

a005ecc9b8062941d0d8751b06f14990
SHA1

7858377326e736ef33a258cca3af1cf17be4aadc
SHA256

f4fe082b4ce123a24234da9a757ccd8873babbc9f168baff77e0deb73ea5f7d3
SHA512

c52f1f41150913689ca4c8653399bc10ea1ebab61267f2ae363f55ed6cc2a8da27da53502df12e404196347c38e352de1b5f7bf1b3b4979734226e4a231d80d5
SSDEEP

6144:UOTtZwQpjQysH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:nTtiQpjQ92EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f4fe082b4ce123a24234da9a757ccd8873babbc9f168baff77e0deb73ea5f7d3
.exe windows x86

bbe7cbb055cf449e411d3311855ae32e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionNamesW
WriteConsoleOutputCharacterW
IsBadHugeWritePtr
IsSystemResumeAutomatic
GetModuleHandleExA
EnumLanguageGroupLocalesA
ResetEvent
CreateTapePartition
GetVolumeNameForVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE