0c8466970b24d29608dc4764b7fde01e9b2cacd8236fcb9d755d15cb79cfe3e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c8466970b24d29608dc4764b7fde01e9b2cacd8236fcb9d755d15cb79cfe3e1
Size

320KB
MD5

a27e7781665416415eaa21bb8facc070
SHA1

e6a56c2d644fb53f4318b22dcb0b6ca9511984a0
SHA256

0c8466970b24d29608dc4764b7fde01e9b2cacd8236fcb9d755d15cb79cfe3e1
SHA512

ee4eaac90f7167942ca2e360477e5e970c3453b594e4a39c0de35ec0f6eaa1e79371d93cd221f8e0e25683bd025c9c9f48356c5bf3fa01f849af3b8a20570863
SSDEEP

6144:/6rIoagq4H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:iUoai2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

0c8466970b24d29608dc4764b7fde01e9b2cacd8236fcb9d755d15cb79cfe3e1
.exe windows x86

6742f68f38fd64450becdc36f1ce0b33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DnsHostnameToComputerNameW
ResetEvent
VirtualProtectEx
LCMapStringA
NlsResetProcessLocale
HeapQueryTagW
FindFirstFileExW
DeleteVolumeMountPointA
LocalAlloc
lstrcpyW
lstrcmpA
WaitForSingleObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE