0c472cb1e8a9d8ffadebb946812e1bb824856f46c4f25582d5b7b3bda0f55354 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c472cb1e8a9d8ffadebb946812e1bb824856f46c4f25582d5b7b3bda0f55354
Size

320KB
MD5

004207e912dee372947952a6862bc7a0
SHA1

5c86deab1c9d7d18cee41d85720f1ee144f53a8f
SHA256

0c472cb1e8a9d8ffadebb946812e1bb824856f46c4f25582d5b7b3bda0f55354
SHA512

4956756b853a3c7ef261edc4ac54b97899c06c8fe2992df9f2deb65d1f69394d2b4244afb3da09929d289d0280b116c7985ab4dd3b71aba0a7e0618f08fc2cc5
SSDEEP

6144:za5FYE+H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:za5Q2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

0c472cb1e8a9d8ffadebb946812e1bb824856f46c4f25582d5b7b3bda0f55354
.exe windows x86

f8afc5d07ef9b9def90e7636f15fca24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
GetNumaAvailableMemoryNode
Heap32Next
GetLinguistLangSize
IsProcessInJob
CreateActCtxA
IsBadHugeReadPtr
GlobalAddAtomW
MulDiv
GetCurrentConsoleFont
WaitForDebugEvent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE