edd856b2436980cc9c5c27a1d03ae4100558b2dab8dceda9e4ad2998c3d95534 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edd856b2436980cc9c5c27a1d03ae4100558b2dab8dceda9e4ad2998c3d95534
Size

320KB
MD5

a38eb24b0818bf7236e820cf4ed4cc40
SHA1

bc7d907bba763413dd1baa1700010168cb4ebaee
SHA256

edd856b2436980cc9c5c27a1d03ae4100558b2dab8dceda9e4ad2998c3d95534
SHA512

83c04a2e2c1e498f81fcdce906525a358f1b70eea5c8c66f10612e9ecb7fe20eb7b7aae66d191ac804a051bfd743b04de08b6b3a0ac00e0a2bce326b274e072d
SSDEEP

6144:w8zqeNg9fnH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:pzqeGH2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

edd856b2436980cc9c5c27a1d03ae4100558b2dab8dceda9e4ad2998c3d95534
.exe windows x86

d4c688aa99f5ce5272eac009d61ed088

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesLengthW
CreateProcessA
GetCommState
lstrcmpiW
GetEnvironmentStringsA
Heap32ListFirst
CreateSemaphoreA
FindFirstFileA
VDMOperationStarted
GetConsoleCharType
FormatMessageW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE