0ff1ca307321523a0a499e9fa0ec3d6cdc4cc5faff6a1e9c81d25380e9b4c100 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ff1ca307321523a0a499e9fa0ec3d6cdc4cc5faff6a1e9c81d25380e9b4c100
Size

320KB
MD5

a0907852205be2fbc65e7829a08ac060
SHA1

b249529675a0ca1085786d3f785b67e15f60aef7
SHA256

0ff1ca307321523a0a499e9fa0ec3d6cdc4cc5faff6a1e9c81d25380e9b4c100
SHA512

4205c6e11485de9a8462df98f3790b2335615deea7feeb598a9ae028040828017cf1fee621465085e0d5949b498262ff2d9d87d4b30eb1e9c52d18bea72ab5b2
SSDEEP

6144:D/l7d1hMMH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Dd7tMa2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

0ff1ca307321523a0a499e9fa0ec3d6cdc4cc5faff6a1e9c81d25380e9b4c100
.exe windows x86

7295d1f993ffee9d2ad18989087a6c3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpi
GetConsoleAliasExesW
IsValidLanguageGroup
ReleaseMutex
CreateThread
SetConsoleHardwareState
BaseInitAppcompatCache
DeviceIoControl
ReplaceFileW
CreateDirectoryW
GetNamedPipeHandleStateA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE