c649adb5f02e1cad239aad516d98c0472b3e86d684be8c3f986d9cd3df58f135 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c649adb5f02e1cad239aad516d98c0472b3e86d684be8c3f986d9cd3df58f135
Size

320KB
MD5

84fa20be4f567a0037f6a88529da6820
SHA1

5e406a5e49cdbf53a2eb93240fff5c9352403509
SHA256

c649adb5f02e1cad239aad516d98c0472b3e86d684be8c3f986d9cd3df58f135
SHA512

edf89a92260fd4d97aca347d00c56450035a5fc9a4543f6f6899ff74f1b5a08be320d777e871df274379ed50333b5826ccf658ceb77fc858a590f3f6889b6141
SSDEEP

6144:WGQwGJOSh2zsSieH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:RQwCOc2zH2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

c649adb5f02e1cad239aad516d98c0472b3e86d684be8c3f986d9cd3df58f135
.exe windows x86

b4c02cea7ce448a641508146a911e71e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
SetConsoleCursorInfo
WTSGetActiveConsoleSessionId
WaitForMultipleObjects
GetNamedPipeHandleStateA
SetCommState
GetNumaProcessorMap
WriteProfileSectionW
GetStartupInfoA
HeapCompact

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE