61931c49ebfa1ab89e2871f287e1c887246bff649a7b0c13d46a39d95d7b58c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61931c49ebfa1ab89e2871f287e1c887246bff649a7b0c13d46a39d95d7b58c4
Size

320KB
MD5

a2a9e7da8a4a9b85016d162052afa3a0
SHA1

10b066a4cbb72985d5c6369c0969b8eda9a29f38
SHA256

61931c49ebfa1ab89e2871f287e1c887246bff649a7b0c13d46a39d95d7b58c4
SHA512

f6159922cbbfd542484ea0e1f805ba6b38461ea12cbedfc21484fec2f0f45bac8c349c38cf42287adbbc511433d9df1c41ca10f4181b3747033355a27853b890
SSDEEP

6144:NxqOyMbjH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:uOyuL2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

61931c49ebfa1ab89e2871f287e1c887246bff649a7b0c13d46a39d95d7b58c4
.exe windows x86

83abbff794159841a6c72db78191056e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetVolumeNameForVolumeMountPointW
_lwrite
CreateDirectoryW
CreateSocketHandle
FreeResource
Module32First
Module32FirstW
GetConsoleCommandHistoryW
GetProcessId
GetConsoleCommandHistoryLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE