14a65db6f8a7a9147f0613e746ca5d863a1f9d87e62dc8080ab945db65b86c56 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14a65db6f8a7a9147f0613e746ca5d863a1f9d87e62dc8080ab945db65b86c56
Size

320KB
MD5

a2d5d8ce512bf7728c8a4b3bbe4069f0
SHA1

5fe7b3ece44718d052f262149d57227e69628918
SHA256

14a65db6f8a7a9147f0613e746ca5d863a1f9d87e62dc8080ab945db65b86c56
SHA512

781a0969c2afe891656d70c964501ecc6c0dffcedeedf85ce75523380df62aa80c3f4cce28a51e2c736f52808640a7ecb6cf554c423c0d38df94670677c10f17
SSDEEP

6144:H55xkt3nYXtH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Zot3YXN2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

14a65db6f8a7a9147f0613e746ca5d863a1f9d87e62dc8080ab945db65b86c56
.exe windows x86

d72f9fa8a667b8c8c725b9039b424bfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CreateProcessInternalWSecure
GetOverlappedResult
DuplicateConsoleHandle
GetEnvironmentStringsA
HeapValidate
AreFileApisANSI
Heap32ListFirst
RemoveLocalAlternateComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE