2371b3571423556abda92c8a0723e83b09f1eb35095062bc71602c0f856975c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2371b3571423556abda92c8a0723e83b09f1eb35095062bc71602c0f856975c2
Size

320KB
MD5

098466c8e9e81109f83321c68c81cd30
SHA1

55165ebd02b9c79f69d8a8b33599bf54f4040fc9
SHA256

2371b3571423556abda92c8a0723e83b09f1eb35095062bc71602c0f856975c2
SHA512

3703e4f62f309953c635b50a787a62614abfdc035a4a0b2335ee7070f7ca8ef65b36075abacc4ba9cc74591e8acab1408c274b3b7b5364d678e68c91b1f85237
SSDEEP

6144:cnXhtaH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Khto2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

2371b3571423556abda92c8a0723e83b09f1eb35095062bc71602c0f856975c2
.exe windows x86

ca1081dc68f52ab84c53ffc0fdc41cde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsExW
IsDBCSLeadByteEx
GetMailslotInfo
MoveFileW
GetConsoleMode
GetUserDefaultUILanguage
lstrcpynA
CreateProcessInternalWSecure
EnumLanguageGroupLocalesW
RegisterConsoleIME
TlsGetValue

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE