fb2b6b9c49cc13fd55757621a3a59abc22ee7414c1c4ab786de66e11a28b1a8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb2b6b9c49cc13fd55757621a3a59abc22ee7414c1c4ab786de66e11a28b1a8d
Size

320KB
MD5

a2910ed38b159ab372d6e088bbeb7260
SHA1

e5ada6020db212bfa9b7f1df944e10285e55fc14
SHA256

fb2b6b9c49cc13fd55757621a3a59abc22ee7414c1c4ab786de66e11a28b1a8d
SHA512

113695898600579f09dbfd1eb0560f665272f52ad4fef127e26d68f68ca2ea4f332fda4189c28fcf452f6d49c63d7df01ce828ea9216eca52b3c998aa83520cb
SSDEEP

6144:RTuJYE4H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:RuJ7u2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

fb2b6b9c49cc13fd55757621a3a59abc22ee7414c1c4ab786de66e11a28b1a8d
.exe windows x86

c2ceafbe4c57385d67eb1ddfd3571826

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
FindFirstVolumeMountPointA
GetSystemTimeAsFileTime
GetProcAddress
CreateHardLinkA
CreateVirtualBuffer
InterlockedIncrement
_hwrite
DecodeSystemPointer
CloseHandle
CreateDirectoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE