fe3750a3d2bddf854b23dfd7e28b1e7ebde49bdecabbe836d7246d71530860ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe3750a3d2bddf854b23dfd7e28b1e7ebde49bdecabbe836d7246d71530860ed
Size

320KB
MD5

4e71beffe052e0f2a387ea2a18d92dc0
SHA1

94f1b34aec163a14a075cccf08b73ca247d7197b
SHA256

fe3750a3d2bddf854b23dfd7e28b1e7ebde49bdecabbe836d7246d71530860ed
SHA512

dc2c62367321c9587a6997c913613526540e3d16acbf2c921db4adef2fb79f8633ed865a3c2e4f419007e7afdf0598bce0def5bc9582789693b8f3f107420e99
SSDEEP

6144:8PbzX3cGwmQbvH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:wzncGwmkf2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

fe3750a3d2bddf854b23dfd7e28b1e7ebde49bdecabbe836d7246d71530860ed
.exe windows x86

77349e0c4af687948c31b4b93e0c6e75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetVolumePathNamesForVolumeNameW
SetFilePointerEx
SetTermsrvAppInstallMode
Module32NextW
CmdBatNotification
SetProcessWorkingSetSize
lstrcpynA
GetProfileSectionA
ZombifyActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE