239db566bbf332b29ee75c890007a1666d68afb2a32ac6e4ec9852491aa0ccf2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

239db566bbf332b29ee75c890007a1666d68afb2a32ac6e4ec9852491aa0ccf2
Size

320KB
MD5

a2e60a8bade26993bacac6886a2dd280
SHA1

df0fd16b4c29960a4e7b16792a6eac956dd83183
SHA256

239db566bbf332b29ee75c890007a1666d68afb2a32ac6e4ec9852491aa0ccf2
SHA512

763d7c576fbab3f503af3919acf5febf29452cc8bb100435ea71c80f6ef752c230448fc34b9522e0232b25533ff5ccecaad0bbd49950119bb2bf76a6c315a5f3
SSDEEP

6144:9j72CjSPH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:92CjS/2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

239db566bbf332b29ee75c890007a1666d68afb2a32ac6e4ec9852491aa0ccf2
.exe windows x86

521ca9d76a22d470f36f608c3a2e0e26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
VerifyVersionInfoA
EnumSystemCodePagesW
GlobalFix
WriteFileEx
DisableThreadLibraryCalls
ProcessIdToSessionId
CreateJobObjectW
FindFirstChangeNotificationW
WaitNamedPipeA
GetNlsSectionName

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE