f3afe5eace6ab41646e79f5d861cacc3265b04548ac3c2b6e8549f7391059e5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3afe5eace6ab41646e79f5d861cacc3265b04548ac3c2b6e8549f7391059e5f
Size

320KB
MD5

a075a15c02d50d7222b70956ce5ec9f0
SHA1

98d06305cf3262d23b311c6ce973aa2b2b90537d
SHA256

f3afe5eace6ab41646e79f5d861cacc3265b04548ac3c2b6e8549f7391059e5f
SHA512

c023746eb89e9dd92b9f263f786cd301fd5683ff9ef0313e6544e67b3457228696ef2a81fdf43bc7105094b953aebece6ce0789aba1d043e80bd8bbe7e1c82d4
SSDEEP

6144:ShHr3k6Si73H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:W3kI72EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f3afe5eace6ab41646e79f5d861cacc3265b04548ac3c2b6e8549f7391059e5f
.exe windows x86

afa811c5b202038e4a55b9d8816d0cfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPFileNameFromRegistry
TlsAlloc
ResumeThread
ReplaceFileA
SetConsoleOutputCP
GetConsoleInputExeNameA
GetCurrentProcessId
LZInit
GetSystemPowerStatus
ClearCommBreak
GetConsoleCommandHistoryLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE