1f519f03f58094e987368292f70783ead459b353a4cdc2b014f2c0b501887cfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f519f03f58094e987368292f70783ead459b353a4cdc2b014f2c0b501887cfd
Size

320KB
MD5

0c2047f5576fddf16307d31c32098580
SHA1

b5b55c990bff881f65c051d5bfa2bef2b4dfc867
SHA256

1f519f03f58094e987368292f70783ead459b353a4cdc2b014f2c0b501887cfd
SHA512

c005d92de94ebc458c2afc89ff221f8c016ef8d0d7a9b79844559474b860b97319c44a4fc356c8d1d700252cbc2e54b9c023b21a1c48a1601c40b639822b1b2d
SSDEEP

6144:Zc11IQG2UDH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:qHXUr2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

1f519f03f58094e987368292f70783ead459b353a4cdc2b014f2c0b501887cfd
.exe windows x86

0e7fcb6cc45cbedb4cc30c9eb1d95d8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ZombifyActCtx
DisconnectNamedPipe
VirtualBufferExceptionHandler
ReadFileScatter
ReadFile
GetTapePosition
SwitchToThread
_lwrite
lstrcmpA
GetProcessTimes
MoveFileExA
GetThreadTimes

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE