b1de82f4dc9ca9500b36138a6908ce7accbad6a7c07fa197ce31c10b437d1727 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1de82f4dc9ca9500b36138a6908ce7accbad6a7c07fa197ce31c10b437d1727
Size

320KB
MD5

a343dfb343726c4ae68a9ec2b2c3f700
SHA1

06dee522186fb6e66e0be3cea9c1d81ceae6452d
SHA256

b1de82f4dc9ca9500b36138a6908ce7accbad6a7c07fa197ce31c10b437d1727
SHA512

dec49172a7d2b65cd5ef596415214166eec1d812453f16c799f32fb39b4469912f64f0cfb467d6912c2a2f15ae555586063281cad51ee71aabcfa5f1e287c1d3
SSDEEP

6144:fVvbz+ggNAH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:FD2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

b1de82f4dc9ca9500b36138a6908ce7accbad6a7c07fa197ce31c10b437d1727
.exe windows x86

a423d05af960d9a1cc8758a063aa234b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExW
GetTickCount
AddLocalAlternateComputerNameW
GetNamedPipeHandleStateW
SetEvent
WTSGetActiveConsoleSessionId
GetThreadIOPendingFlag
GetConsoleKeyboardLayoutNameW
CreateMemoryResourceNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE