b4da0a0097544faf4c928a1df02d74a997d0ef9612a7ddd979e041eec91e5516 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4da0a0097544faf4c928a1df02d74a997d0ef9612a7ddd979e041eec91e5516
Size

320KB
MD5

a28af832dc80f596ba02c26024299ce0
SHA1

202b3748fbe0c64b574b8924f2af4e5f49b1a422
SHA256

b4da0a0097544faf4c928a1df02d74a997d0ef9612a7ddd979e041eec91e5516
SHA512

b871e2f82dfaef5b2f51609f01c7ea0c041c50f2982d8bfc9186bce8685a5e1b881a78045057c837cddc53bacda75e2898dce8987d4e571313adb5faaf9bddc5
SSDEEP

6144:r00H33fr9jH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:3HnT9L2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

b4da0a0097544faf4c928a1df02d74a997d0ef9612a7ddd979e041eec91e5516
.exe windows x86

b5e92f4a518a35976c3d611892cb522e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AssignProcessToJobObject
RemoveLocalAlternateComputerNameW
RegisterConsoleIME
GetCPInfoExA
EnumDateFormatsExA
NlsConvertIntegerToString
TlsSetValue
BuildCommDCBAndTimeoutsW
ReplaceFileW
CreateProcessInternalW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE