f8bfd4cf784f200585df139067031aac32fb03de9fe80b5801a0392049ec8df1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8bfd4cf784f200585df139067031aac32fb03de9fe80b5801a0392049ec8df1
Size

320KB
MD5

0c470a0fbd18b05fe7be6472f28e4a60
SHA1

43104ee05fe1311ac9441f7cb3bd4a4e198303e7
SHA256

f8bfd4cf784f200585df139067031aac32fb03de9fe80b5801a0392049ec8df1
SHA512

a4638726a1a622d7088cacf0f5bc893213ef89917711ef9751803c57c68445e62dbda8d4fbff4f3d5c1074b8a379b8e6627b28ea1bc868e79c25e384aef89876
SSDEEP

6144:8xbpOxH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:152EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f8bfd4cf784f200585df139067031aac32fb03de9fe80b5801a0392049ec8df1
.exe windows x86

f8e10b8579ea1c101e085af5960b19a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
CreateTimerQueue
VirtualQueryEx
GetACP
GetStringTypeExW
RtlMoveMemory
GetVersionExA
MoveFileA
GetCommandLineW
InitializeCriticalSection
BaseQueryModuleData
DeleteTimerQueueEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE