4037718d19d3000171a427a5cb2ca0a1336f4c71e1b90805eb8bf36b9626076a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4037718d19d3000171a427a5cb2ca0a1336f4c71e1b90805eb8bf36b9626076a
Size

320KB
MD5

0253f540800767ab5547ee8c9e890e70
SHA1

7c939c44ea0a80572ed9ff8c977b90d62499bcd2
SHA256

4037718d19d3000171a427a5cb2ca0a1336f4c71e1b90805eb8bf36b9626076a
SHA512

393cd549672640bcbb75580e46629c452d52a62c111bf951cb03271242ccb4ec5ae19c8a64f94b1ef919649529505b172544134d1f763521e807c961f64d4e68
SSDEEP

6144:U+lWMtOP9Rpra2H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:U+lnOP32EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

4037718d19d3000171a427a5cb2ca0a1336f4c71e1b90805eb8bf36b9626076a
.exe windows x86

982ea83b8a4d927c4860087f5a01ab09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TermsrvAppInstallMode
CancelIo
AddAtomA
CreateProcessInternalW
SetConsoleKeyShortcuts
lstrcmp
GetGeoInfoW
GetDllDirectoryA
GetTempPathW
GetProfileIntW
GetOEMCP
GetModuleHandleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE