475283b081fa57a3898f758ee102ae02343e37b29c85b43b1430a0bdfed55425 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

475283b081fa57a3898f758ee102ae02343e37b29c85b43b1430a0bdfed55425
Size

320KB
MD5

a394e880a333a852641d48b0ffbeaf10
SHA1

8d619dcc75d0fe3b3b6702f8899efe3540a2d25d
SHA256

475283b081fa57a3898f758ee102ae02343e37b29c85b43b1430a0bdfed55425
SHA512

5cde786bbcfaf211d0c82b1489f4ddee9fb9049f1a504ed25d72e60c682deea3ae66f4fccaa9a4074bb6af5a2e4dd38a8bfb88c7cf3a69abf059957d97ccb6b4
SSDEEP

6144:q19+pH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:qk2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

475283b081fa57a3898f758ee102ae02343e37b29c85b43b1430a0bdfed55425
.exe windows x86

51c160cc859ffc0059896a82a517ead5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesW
OpenMutexA
VerLanguageNameA
_hwrite
GetProcessIoCounters
IsValidLanguageGroup
NlsGetCacheUpdateCount
FindFirstFileExW
EnumerateLocalComputerNamesA
NlsResetProcessLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE