b099a83b4bb64537160abbfce97c527035079e4ba49cca04064b26c0a32a3302 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b099a83b4bb64537160abbfce97c527035079e4ba49cca04064b26c0a32a3302
Size

320KB
MD5

a325527533ab4ecc6b61d70dc16c42d0
SHA1

588d5558d8cd0976cd4e9a78c5892722784537d6
SHA256

b099a83b4bb64537160abbfce97c527035079e4ba49cca04064b26c0a32a3302
SHA512

3719cb10c770f5fd76c0c52eb0688f683876e642e0a977e19989222a5ef375dbbbbbcc76234be0a3b41b8ced9f3acbf6c72f0b383446cb80bdcec8b6494c80e7
SSDEEP

6144:fKgA2m8U0ZH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:yJh8P2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

b099a83b4bb64537160abbfce97c527035079e4ba49cca04064b26c0a32a3302
.exe windows x86

6730e6db1628d8dc14f9aec0d06814f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ConvertDefaultLocale
GetVDMCurrentDirectories
ReadConsoleOutputCharacterW
GetDriveTypeW
ResumeThread
GetConsoleAliasExesLengthA
DebugSetProcessKillOnExit
DeleteAtom
InterlockedDecrement

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE