d7964e406976d26ec53322750e8eb6dbf8883cca7920b81089be196a0839635b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7964e406976d26ec53322750e8eb6dbf8883cca7920b81089be196a0839635b
Size

320KB
MD5

a2e2f1fcfeb5608617f065660e268510
SHA1

6eb9c559bc286ff55302d26ed28c0ccc0dfb759a
SHA256

d7964e406976d26ec53322750e8eb6dbf8883cca7920b81089be196a0839635b
SHA512

f406b34ba13db861cd108b9a1c9ed067675820fe7182274a603eaa9b2cf4cc133238f2a064c12b0d20dace0b2dbb02097bc2fa2b6ade4a3ecb326040bd5ce563
SSDEEP

6144:FldMiicH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:ndMC2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

d7964e406976d26ec53322750e8eb6dbf8883cca7920b81089be196a0839635b
.exe windows x86

475294308fecfceca3056950f9f1c52e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteTimerQueueEx
ReadConsoleW
CreateSemaphoreA
GetConsoleAliasesA
lstrcmpW
ReplaceFileA
UTRegister
SetConsoleTitleW
UnregisterWait
PulseEvent
CreateFileW
GetLocaleInfoA
GetExpandedNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE