d754da1de62affcb4cfbe97e59acdcf9e5d9be8259bd3791ac2d796a7e39e91b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d754da1de62affcb4cfbe97e59acdcf9e5d9be8259bd3791ac2d796a7e39e91b
Size

320KB
MD5

1fb41274d2d503767633b24ab4c012b0
SHA1

a898a2f8c2ae1633398eba267b349a2fbed97b6f
SHA256

d754da1de62affcb4cfbe97e59acdcf9e5d9be8259bd3791ac2d796a7e39e91b
SHA512

dbd197fcac2ed147cc9bf8c698838d45d0569a7dced8b161b66f3e007fc7f355d0988a80b17a94cac9a24611502a34fd8a9fb28365acfe48406e8fbbfe4f3e25
SSDEEP

6144:9+3gYH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:9+J2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

d754da1de62affcb4cfbe97e59acdcf9e5d9be8259bd3791ac2d796a7e39e91b
.exe windows x86

375d7bfaeba37f4900fe476102529b3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputCharacterA
EscapeCommFunction
GetNativeSystemInfo
GetDiskFreeSpaceExW
_lcreat
GetConsoleCP
RegisterConsoleVDM
GlobalFindAtomA
ReplaceFileA
PulseEvent
FindNextVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE