209af7396cbaa8006c9cd87734b772978a43479ba3bac338c8f61c43543eefbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

209af7396cbaa8006c9cd87734b772978a43479ba3bac338c8f61c43543eefbd
Size

320KB
MD5

8392c03f5442c041e65d0e88b526d3f0
SHA1

794a4d2a97b4469ba2a16ff40e090a9a5ea6dfc7
SHA256

209af7396cbaa8006c9cd87734b772978a43479ba3bac338c8f61c43543eefbd
SHA512

3d042b730a140168b2b1cd8cdddc44d3f666b3e74e67d79ca0cd92d2a668fc8cb6324e8bf101a94a763e3d51ed278fdd984fc2125e878a428c086dc19ae40c67
SSDEEP

6144:FJ29djKRN9ZBPH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:gjKRTZB/2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

209af7396cbaa8006c9cd87734b772978a43479ba3bac338c8f61c43543eefbd
.exe windows x86

feb97d36291030beea969714c8739a45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointW
VerifyVersionInfoW
CompareStringA
Beep
GetCommConfig
GetProcessIoCounters
WritePrivateProfileStringW
CancelWaitableTimer
ReleaseMutex
FindNextVolumeMountPointW
RegisterWaitForSingleObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE