f810229128c77525ed616e49456b9480c411f73107a5acc82f4b555268dadfaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f810229128c77525ed616e49456b9480c411f73107a5acc82f4b555268dadfaf
Size

320KB
MD5

a2969593342834b7ca8dde6b1a13cdc0
SHA1

e06e0e7c2d5d458ddd77bb3db743d786f8e4ecc7
SHA256

f810229128c77525ed616e49456b9480c411f73107a5acc82f4b555268dadfaf
SHA512

f89ff3c6539c607339d1bf0e1491503d36beeb4e514977c2297ee01d1036582e907ca061a42fb579779f32c806bd46a9abb13b64363c019a01fd4cd0e5b9535a
SSDEEP

6144:oDD/i+OZH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:ID/i+OR2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f810229128c77525ed616e49456b9480c411f73107a5acc82f4b555268dadfaf
.exe windows x86

33664d16195c2899fc6da1f8b23dc7c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
OpenFileMappingW
GetConsoleScreenBufferInfo
GetAtomNameA
MapUserPhysicalPages
GetConsoleCommandHistoryA
VDMConsoleOperation
ReleaseMutex
SetFileApisToANSI
SetCommBreak
FindActCtxSectionGuid

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE