d7686b88402ad4dd579a37cdac4a887eb065ec386545838af60ddcc95d6cd7b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7686b88402ad4dd579a37cdac4a887eb065ec386545838af60ddcc95d6cd7b8
Size

320KB
MD5

a31e89ed294e3107bd04f90e46f32a00
SHA1

fc140513d9d57d499d59dc8acb0428cf061a9fbe
SHA256

d7686b88402ad4dd579a37cdac4a887eb065ec386545838af60ddcc95d6cd7b8
SHA512

7060e6cc64888e6d67502427279289560f49d45ba0d91ac8cc30d7b01d7f54ec3ab15a909982d317fd89a3d8c7efa7205d0b27c105fa41f63c229822abd8a408
SSDEEP

6144:VgjDfgZDZxYMRRTghUH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:wKd2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

d7686b88402ad4dd579a37cdac4a887eb065ec386545838af60ddcc95d6cd7b8
.exe windows x86

f248b210b408f93c67ac29efeecec770

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
SetFirmwareEnvironmentVariableA
EnumTimeFormatsA
CopyFileA
GetConsoleInputExeNameW
GetStartupInfoW
AssignProcessToJobObject
TryEnterCriticalSection
FindClose
InterlockedCompareExchange

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE