f2a1bfab00e6d085a63a82845de9151563564b816dc88b36f34650d38176e334 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2a1bfab00e6d085a63a82845de9151563564b816dc88b36f34650d38176e334
Size

320KB
MD5

0ad70b9242ca5ea6d708f3351de87170
SHA1

a6cf74ffad71d69a2c54072667668fc5d422c195
SHA256

f2a1bfab00e6d085a63a82845de9151563564b816dc88b36f34650d38176e334
SHA512

c24a1fe21de514e11baabf4dff73e5e1dc5aa44704097230256bfb882ab8abf43baf2169d22bfa2ea6a5c1f02be987b6a88d1726464887b60b4d358b49c766b7
SSDEEP

6144:6gA9hWH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:gW2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f2a1bfab00e6d085a63a82845de9151563564b816dc88b36f34650d38176e334
.exe windows x86

5199933c051f9ba620cc8e8d459915c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVolumeNameForVolumeMountPointW
GetCPInfo
GetNumaAvailableMemoryNode
ValidateLocale
lstrlen
ReadConsoleW
FindFirstFileExA
GetSystemDefaultLCID
HeapQueryInformation
GetNumaAvailableMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE