18fcd26cedc42604761e4789063ca4499a77bf547ca0a0029b8440c2eac2fe4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18fcd26cedc42604761e4789063ca4499a77bf547ca0a0029b8440c2eac2fe4a
Size

320KB
MD5

006aade51f311702f52b69cfc63b1e50
SHA1

c528433faae6ba2e4a7f3dcb09710933e87b0218
SHA256

18fcd26cedc42604761e4789063ca4499a77bf547ca0a0029b8440c2eac2fe4a
SHA512

0833d65d794a6be3eceaf05c5ce3c1554ebe83f23246ec4931292a0d838d74db95183528e2f589acf9ba340ae7fb62e0f83497e471a1cfc8e0fb7c3478121efe
SSDEEP

6144:Gl8/s2W7YowmH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:T/ZWEG2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

18fcd26cedc42604761e4789063ca4499a77bf547ca0a0029b8440c2eac2fe4a
.exe windows x86

0adacd9462008fc2562def5fedc96f6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeA
RtlCaptureContext
GetCommandLineA
GetDateFormatW
HeapSetInformation
DeleteAtom
TzSpecificLocalTimeToSystemTime
DeleteVolumeMountPointW
GlobalFree
QueryDosDeviceW
BeginUpdateResourceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE