fbf27549119de44dd1e86cf8cc53b7ffcbf7f3c400de3b3485137d3660c40326 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbf27549119de44dd1e86cf8cc53b7ffcbf7f3c400de3b3485137d3660c40326
Size

320KB
MD5

2023c5c79b6d76eadd9c080bf2602c00
SHA1

af3c42cc7ab11d78b7b0bd306268a78516c56c44
SHA256

fbf27549119de44dd1e86cf8cc53b7ffcbf7f3c400de3b3485137d3660c40326
SHA512

e69abaebbe0974e8f7635fb917f85005d032be9d7261a1e6e804ee55a924af2c9e51bd8bc34efa4f5f4e1f3cebcefdb5cb24a9e3c5fb65f313c21188087b24b1
SSDEEP

6144:25EBH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:2y2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

fbf27549119de44dd1e86cf8cc53b7ffcbf7f3c400de3b3485137d3660c40326
.exe windows x86

d724ca9481250d625c4ee712d09d79ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetShortPathNameA
MapViewOfFileEx
SetClientTimeZoneInformation
GetVolumeNameForVolumeMountPointA
ReadConsoleOutputA
DebugBreakProcess
GetStartupInfoW
OpenMutexW
MoveFileExA
GetConsoleHardwareState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE