570f8d3fadfda27ad1caf79ffaa722f26907266f333611529f3d14925fc2ac52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

570f8d3fadfda27ad1caf79ffaa722f26907266f333611529f3d14925fc2ac52
Size

320KB
MD5

092adf877259c1fa31b92c724c0293a0
SHA1

47d4e58607f852f81e3a41a0c794505aa0519dcb
SHA256

570f8d3fadfda27ad1caf79ffaa722f26907266f333611529f3d14925fc2ac52
SHA512

8b4c28570497dabc4fdc4af359bf65f60d3319c50d61d9f0085fffd97841ec327e0d117c6a9c4c22711a235ba8e4123d115a4ebfee244a0fcd570527f0cb0842
SSDEEP

6144:HcxtiV9CUdtH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:HcxtMldN2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

570f8d3fadfda27ad1caf79ffaa722f26907266f333611529f3d14925fc2ac52
.exe windows x86

df2dc1812d60c642532aefcf35c5e8ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetComputerNameExW
DeleteVolumeMountPointA
ExitProcess
EncodePointer
SetSystemPowerState
GetNumaProcessorMap
OpenEventA
TransmitCommChar
GetCurrentProcessId
HeapLock
HeapSetInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE