650810f8cc71f53df7a700d763f90c7115384d2883ebbe37719d414bd6caa632 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

650810f8cc71f53df7a700d763f90c7115384d2883ebbe37719d414bd6caa632
Size

320KB
MD5

a27ff1827020e986664f5009838271f0
SHA1

6a260993d3bf5122acb5361f8dfcff42a8c17daa
SHA256

650810f8cc71f53df7a700d763f90c7115384d2883ebbe37719d414bd6caa632
SHA512

965c230f29af6a4b6d623ba6bebd5e2dfb254cd481a8443e017d9d665aea9d5091886cc3e5c68de0bf297a0ed8229487a1a6a80c5feeb886e655c9fe833fde02
SSDEEP

6144:+DKRqfBN1lXH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:+DUSrn32EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

650810f8cc71f53df7a700d763f90c7115384d2883ebbe37719d414bd6caa632
.exe windows x86

53b90786bf6ecd894a536065e81c0fcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWriteWatch
GetAtomNameA
GetVolumePathNamesForVolumeNameW
SetEnvironmentVariableA
DosPathToSessionPathW
InterlockedIncrement
SetConsoleCursorMode
LocalFileTimeToFileTime
DebugBreakProcess
GetSystemTimeAdjustment

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE