018daf6bdf379f9dac5d15a4a68186ffec0b9d98508fdd5e282397308ffa4f47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

018daf6bdf379f9dac5d15a4a68186ffec0b9d98508fdd5e282397308ffa4f47
Size

320KB
MD5

a2b9f01d6b96a90c69e7c31efc164430
SHA1

454c00fd414867bfc42f7d3778e950ef12309284
SHA256

018daf6bdf379f9dac5d15a4a68186ffec0b9d98508fdd5e282397308ffa4f47
SHA512

30ad09b3ab580abb2d6f53d3c3492236b9cb1ce81eacea4d82ddb8e958422b3c6bb3e83fc849d0172a2dd652efb4392b0e90c79c790e17a4468124ff44af25fb
SSDEEP

6144:B109FV9ZFH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:PA/2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

018daf6bdf379f9dac5d15a4a68186ffec0b9d98508fdd5e282397308ffa4f47
.exe windows x86

6bdd2d5e6144d60e70108ad781a389e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeMountPointW
InitializeSListHead
FindAtomA
GetModuleFileNameW
GetVolumePathNameA
SetHandleContext
SetFileApisToOEM
LocalReAlloc
DebugActiveProcessStop
ReleaseSemaphore
AssignProcessToJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE