0fad9aa496ff143b83f67e3c2560d82926a52fab897761f4f06a2903f78bfdd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fad9aa496ff143b83f67e3c2560d82926a52fab897761f4f06a2903f78bfdd4
Size

320KB
MD5

2ccf5a393e4792f84f799441c59a0270
SHA1

46a1e007cdf7f792a23a1bdb94e8d1940e60ca91
SHA256

0fad9aa496ff143b83f67e3c2560d82926a52fab897761f4f06a2903f78bfdd4
SHA512

8f0e517da9010c199f8763adf8eb784b6606008b155eed95c1638db7db9d2068dcf52a64af1026a4b8f2fec81e36e3f696bd45e914089dff6b1da31755a693d1
SSDEEP

6144:P1BJDUnKH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Pn5UY2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

0fad9aa496ff143b83f67e3c2560d82926a52fab897761f4f06a2903f78bfdd4
.exe windows x86

38846cf000f82292aac70ed4a1ed9872

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryLengthW
IsDebuggerPresent
BackupRead
GetFullPathNameA
GetFullPathNameA
CloseConsoleHandle
CallNamedPipeW
GetTapeStatus
WriteConsoleOutputCharacterA
ReadFileScatter
Sleep

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE