1b63e6aa3eec1bb52b2ee683f24d87502b045fbd4c85d07d4980fa44f2fb0c84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b63e6aa3eec1bb52b2ee683f24d87502b045fbd4c85d07d4980fa44f2fb0c84
Size

320KB
MD5

a2bec428a63c9023bb6b7307cd48e7f0
SHA1

0b446b38cc085a7b870da431c96a0e41ccf52de3
SHA256

1b63e6aa3eec1bb52b2ee683f24d87502b045fbd4c85d07d4980fa44f2fb0c84
SHA512

be57808e2f0d4b923f27533389574b8b239747be9e8a0b118afb47a376fc228ca0c2e906642bac5bcaba4b59f6a07144b4eb72b338d60c50e0658e6423e89474
SSDEEP

6144:ZrU50r1H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:ZPF2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

1b63e6aa3eec1bb52b2ee683f24d87502b045fbd4c85d07d4980fa44f2fb0c84
.exe windows x86

ebcdb7681c983b35436ca853a6944ece

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelTimerQueueTimer
lstrcpy
GetFirmwareEnvironmentVariableW
CallNamedPipeA
HeapQueryInformation
_hread
GenerateConsoleCtrlEvent
BaseInitAppcompatCacheSupport
GetAtomNameW
MultiByteToWideChar

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE