afb44cedcb77dd962265dbaddc0d5f56c846f2821350864dbc3ec7b89403a376 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afb44cedcb77dd962265dbaddc0d5f56c846f2821350864dbc3ec7b89403a376
Size

320KB
MD5

053898d3669c54f6b2681e27683bfd70
SHA1

b3506aaf973ec0626a0824a278c8a2602fe52eb5
SHA256

afb44cedcb77dd962265dbaddc0d5f56c846f2821350864dbc3ec7b89403a376
SHA512

ea74b4d5b79741d1837dc9956ae18f07e6f6ee07b6eebfa14386d1cf9071b18210b62ad5fa3d026e646742b64e18fa38d196cb888a39fae994f11860cefcd342
SSDEEP

6144:FSKjqwbzH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:FDzb2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

afb44cedcb77dd962265dbaddc0d5f56c846f2821350864dbc3ec7b89403a376
.exe windows x86

ffa72ffbd42233b205b2d63eb14257a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Module32NextW
GetFullPathNameA
RegisterConsoleVDM
SetTermsrvAppInstallMode
GlobalHandle
GetConsoleDisplayMode
BeginUpdateResourceA
Process32First
LZStart
CreateMailslotA
GetVersionExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE