36f9aab981f5280d0f3b3946bc430bdb78ecb34f29c51572789d15af88253597 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36f9aab981f5280d0f3b3946bc430bdb78ecb34f29c51572789d15af88253597
Size

320KB
MD5

a056e75e5395521c01a23eb25f40cd50
SHA1

98f918bf32213419bb6dfd7fd66625ceabdf33de
SHA256

36f9aab981f5280d0f3b3946bc430bdb78ecb34f29c51572789d15af88253597
SHA512

fe40c4320ee40e15b7c96ba61e1dbb89a3e1939d141508d1c7cfb571f857f0ba339039372d0a57b0fc7f8fc3889462bbe875b343a9f7250f7b6acb604375272e
SSDEEP

6144:naT1Y+uz0UZaH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:no1Y+2Zo2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

36f9aab981f5280d0f3b3946bc430bdb78ecb34f29c51572789d15af88253597
.exe windows x86

6faba1000e0104c02dc55d14e2c8e778

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameW
ChangeTimerQueueTimer
FindFirstFileW
FindAtomW
InterlockedDecrement
IsDebuggerPresent
GetFileAttributesA
HeapFree
GetDiskFreeSpaceA
CheckRemoteDebuggerPresent
GetNumaProcessorMap

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE