97457bc25f450c660088e70584dfe8132f9f0dfc8680475795fccb858f7890c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97457bc25f450c660088e70584dfe8132f9f0dfc8680475795fccb858f7890c2
Size

320KB
MD5

a08de20bc5b2513721c3422a04cc2910
SHA1

bd1e5c1be997acc31fd987592eaaa2c6399bf45f
SHA256

97457bc25f450c660088e70584dfe8132f9f0dfc8680475795fccb858f7890c2
SHA512

6083b5c047d999d6c75398a7ea3ec8ada6bd5e0f197849d418147229be460c5219f3b192b58620d7f5c24165c0ddb406bb9aa711301e3e4c343293be03755b73
SSDEEP

6144:pvEdOaMH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:1Ekaa2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

97457bc25f450c660088e70584dfe8132f9f0dfc8680475795fccb858f7890c2
.exe windows x86

09bdef914873983fc92fe6c5ab4c08fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
MoveFileExW
SetFirmwareEnvironmentVariableW
AddLocalAlternateComputerNameW
GlobalFindAtomA
CopyFileA
InterlockedPushEntrySList
DeleteVolumeMountPointA
EnumTimeFormatsW
FindNextFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE