993b7dfea1e3f76cb9d6a16822b94c96380e3ff3b56cf3b905d609840454960b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

993b7dfea1e3f76cb9d6a16822b94c96380e3ff3b56cf3b905d609840454960b
Size

320KB
MD5

0d78c832362cfce2bc2990d567909960
SHA1

987a1449dfc63cd1899e4af80b0a5464329a72e9
SHA256

993b7dfea1e3f76cb9d6a16822b94c96380e3ff3b56cf3b905d609840454960b
SHA512

15d1a9aef92aa93507857e90740ec7ac5cdc3ed579bc27e07d8aecd97d8dc82be6d56588cc1dbda0963d7584f3feec1f120bfdd3657ced8d81b61f8082898815
SSDEEP

6144:uQCeq0FYeH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:H5q0FF2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

993b7dfea1e3f76cb9d6a16822b94c96380e3ff3b56cf3b905d609840454960b
.exe windows x86

4a5d328a469518f3bc5fca421af8407a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExW
BackupWrite
GetThreadContext
IsValidLanguageGroup
QueryActCtxW
UTUnRegister
SetFilePointer
GlobalLock
CreateDirectoryA
GetConsoleScreenBufferInfo
IsProcessorFeaturePresent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE