fed84604cab647b4603fc74cae3f16f457d6aff585db17bf86d9931393058a92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fed84604cab647b4603fc74cae3f16f457d6aff585db17bf86d9931393058a92
Size

320KB
MD5

08dba4c23f812e8bddccd5fdfaea26f0
SHA1

c3bf895c669dc92fd0555912cc49ed0125a98cd1
SHA256

fed84604cab647b4603fc74cae3f16f457d6aff585db17bf86d9931393058a92
SHA512

05f876204c659452e89efbac1fde356fe733dcd94bf41a8e0df5ad4fa5e6cf6697df8036afe54c2c2042e0d4b89e7a4a95af6a17db880c7edfff6049dd648fd9
SSDEEP

6144:lwf+xoK6H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:o+WH2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

fed84604cab647b4603fc74cae3f16f457d6aff585db17bf86d9931393058a92
.exe windows x86

49ab690675c93bd25e5df3c8d30dbae2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapUsage
AllocateUserPhysicalPages
InterlockedIncrement
ReadFileScatter
GetCurrentThread
RegisterWaitForInputIdle
EnumResourceLanguagesA
GetVolumeInformationA
GetFileTime
SetCommConfig

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE