744828b1884b69b9bce4fee71df0c4a8848a0a961470bff767cb96ae93f2b208 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

744828b1884b69b9bce4fee71df0c4a8848a0a961470bff767cb96ae93f2b208
Size

94KB
MD5

fcad82740629a831e1388cbfa1edd13c
SHA1

da2da05868233f315eb365341c10767977fbd31a
SHA256

744828b1884b69b9bce4fee71df0c4a8848a0a961470bff767cb96ae93f2b208
SHA512

05ac73c69d80d7e6b0854f09c285f8461014cb5de36547036dc074e87cf5b15af5b5fe0c2469c99e1a52aeeaf5716c50e98977b39cb60aeaaadbc7e2f8bcd31c
SSDEEP

1536:H9TFcFJo5NSGndKABM9FluUmvtjeEyNm+1FWlrsKE7jwaaHw7Koj4rNR6h7PO:H9WFG5DKzFl5mFkm+1FWJsjwaaHw7KoI

Score

N/A

Malware Config

Signatures

Files

744828b1884b69b9bce4fee71df0c4a8848a0a961470bff767cb96ae93f2b208
.exe windows x86

28f91febe3d0c5e5bdaa4dbc6f720d11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
ResetWriteWatch
GetFirmwareEnvironmentVariableA

msvcrt

__p__commode
__p__fmode
_except_handler3
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type

Sections

.text1
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE