307a857cdea64804ab640e6cfd059295dabec313b74ccbb40c988b52450b9691 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

307a857cdea64804ab640e6cfd059295dabec313b74ccbb40c988b52450b9691
Size

76KB
MD5

0c8c71eb8ce9a8cfc80794d213e1fa19
SHA1

17a2e003d0c1151c8277bbb03c123bb7b133060c
SHA256

307a857cdea64804ab640e6cfd059295dabec313b74ccbb40c988b52450b9691
SHA512

21108ad7617a5070f5eb8c725385bd6249d18084e727879d81528bdc73bf51ec5fda414f83ad6c75ee59f6f9e712bff833299fc01ee18e265448b25adca4a105
SSDEEP

1536:0G+WQEZb2FWUHPUXBlupsoa+STh2dli0qfOcQUa3pjVrs2ryrd1vUQuq6:1fQEadH8lupsoatQjcbuHs2qo

Score

N/A

Malware Config

Signatures

Files

307a857cdea64804ab640e6cfd059295dabec313b74ccbb40c988b52450b9691
.exe windows x86

5230dcf850d0cc1f046ee6e4d0636186

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynW
GetFileType
GetConsoleAliasesLengthA
RemoveLocalAlternateComputerNameA
FindActCtxSectionGuid
GetProcessDEPPolicy
SetThreadExecutionState
AddLocalAlternateComputerNameW
GetDriveTypeA
SetConsoleInputExeNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE