f36395873d2a3365a83d2ee9aba3d0cbb5e2a535fcffc019215b5b5e7e87e3a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f36395873d2a3365a83d2ee9aba3d0cbb5e2a535fcffc019215b5b5e7e87e3a8
Size

320KB
MD5

0771ae6b266882a02170bb437600bf90
SHA1

555fbb6f66b9e718bef20248d6b44fbd44971d71
SHA256

f36395873d2a3365a83d2ee9aba3d0cbb5e2a535fcffc019215b5b5e7e87e3a8
SHA512

945d055dac11ee9fe52437df5756432f6d6a0fe6cde9649f9942c799de504ba4b483828fe431c5c2ee4d4419609e187f03e434c7da836453a174f96c8b9d5733
SSDEEP

6144:G8i2SVk/wH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:TiZ2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f36395873d2a3365a83d2ee9aba3d0cbb5e2a535fcffc019215b5b5e7e87e3a8
.exe windows x86

46d52b5c93bf412e3eb133ae8fd38b36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFile
OutputDebugStringA
lstrcpynA
BuildCommDCBA
VirtualUnlock
OutputDebugStringW
GetVolumeInformationW
Process32Next
CreateProcessA
IsDBCSLeadByteEx
AddLocalAlternateComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE