f683910bb8cc1cbebe8212315b80e6fa50553a1a29a335bbaac6701d686fc4fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f683910bb8cc1cbebe8212315b80e6fa50553a1a29a335bbaac6701d686fc4fa
Size

320KB
MD5

a2b5721495998540aa6c9bab887e6110
SHA1

66e86253f1e83b5be0ebfd1aae0ca507c9679c27
SHA256

f683910bb8cc1cbebe8212315b80e6fa50553a1a29a335bbaac6701d686fc4fa
SHA512

b6fc39865d4d97cddfe7e69de666699f6fa4894b3b6990292b58db1b1d7930ee2fd610673163412a33c11591113d8a4e176156c6af52f2978c015857f410f362
SSDEEP

6144:cQ8BX3atk+oH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:nm3ae+e2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f683910bb8cc1cbebe8212315b80e6fa50553a1a29a335bbaac6701d686fc4fa
.exe windows x86

bbdccae83574d921ee979367509f96d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleInformation
InterlockedIncrement
GetNumberOfConsoleInputEvents
GetPrivateProfileIntA
PostQueuedCompletionStatus
GetUserGeoID
EncodePointer
LZOpenFileA
CreateDirectoryA
WaitForMultipleObjects

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE