79cd9e69437631841c525882e7def158a72e8162bf8c89ef72e0709665e55723 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79cd9e69437631841c525882e7def158a72e8162bf8c89ef72e0709665e55723
Size

320KB
MD5

08d5973bb63ac825c38e70e79138ba00
SHA1

40eb6609eac70202334f2ae164852643f797fb97
SHA256

79cd9e69437631841c525882e7def158a72e8162bf8c89ef72e0709665e55723
SHA512

746fba1b81a493580a9251200762fb84878e6c66d0aa3878f78ff49f9f74349ede58d817808d645bdceb09fa52783e8ba2c36720c886f1e99077d714eceafdf6
SSDEEP

6144:kqmKscEGhe7rMH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:kqPTAG2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

79cd9e69437631841c525882e7def158a72e8162bf8c89ef72e0709665e55723
.exe windows x86

cf56559ca029a8f37f3f693d0f0b52d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlCaptureStackBackTrace
BindIoCompletionCallback
VDMOperationStarted
BindIoCompletionCallback
CheckNameLegalDOS8Dot3A
IsValidLocale
GetComputerNameA
lstrcmpiW
GetComputerNameExW
HeapFree
CreateDirectoryExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE