c949729e70ccb897b9eb1c74875391f06ae667b500eea8d6b41706e373355240 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c949729e70ccb897b9eb1c74875391f06ae667b500eea8d6b41706e373355240
Size

320KB
MD5

080a7a2b0dbbff00f1b5cfde6e764520
SHA1

fd34db716dad9b1fb16de802493cfc49bea2a9c0
SHA256

c949729e70ccb897b9eb1c74875391f06ae667b500eea8d6b41706e373355240
SHA512

db33d41a3a88cc7c7c1ca646693eaf47d24bbfac5bf414fbc3c2b85a26cfcabd4f4caed1dacf9093d6e8d1ad22465f376f11fd7ecf719f184f26458873621fce
SSDEEP

6144:rcMAnaTZtWqVm9H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:rcnaT/Wkmd2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

c949729e70ccb897b9eb1c74875391f06ae667b500eea8d6b41706e373355240
.exe windows x86

b27b4b7ab6d076102d85a383017bbfe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiber
CreateDirectoryExW
SetStdHandle
GetNextVDMCommand
EnumerateLocalComputerNamesW
GetNumaAvailableMemoryNode
GetCompressedFileSizeA
GetVolumePathNameA
CmdBatNotification
SetEndOfFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE