file

General

Target
file
Size 362KB
Sample220308-xd7raaaeg4
SHA256 9424e361d1fff5dd475b78a0436413a0ba022d3e4e0d13967bf7a27362f3a144
MD5 f7c6415bfe41a6001c36828a34ec954e
SHA1 e1c6d6745cd703b4f46e03c9fe99bc893583d408
SHA512 e7c82f7febeb788bc9c7487a76db9aa17fcae7f812c0ec073c751027bad6e5b59c62f77420ba002ec795a9ea460a88a317db15e2f7cc7fe7c144def40640e251
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

file

.zip 362KB
core.bat

184B
license.dat

336KB
pistol32.tmp

.dll 43KB

SHA256 9424e361d1fff5dd475b78a0436413a0ba022d3e4e0d13967bf7a27362f3a144
MD5 f7c6415bfe41a6001c36828a34ec954e
SHA1 e1c6d6745cd703b4f46e03c9fe99bc893583d408
SHA512 e7c82f7febeb788bc9c7487a76db9aa17fcae7f812c0ec073c751027bad6e5b59c62f77420ba002ec795a9ea460a88a317db15e2f7cc7fe7c144def40640e251
MD5 SHA1 SHA512

pistol32.tmp

IMPHASH f90509917e8067e5e8c1867072610495
SHA256 58d60dbbfde0e93ed83c1656660252fc6d192532cbd5d122c39c0481848a22f2
MD5 55c3137ff1fb18f315a42e41e00c97a1
SHA1 b798ce92577de625ae4f4cbd15a5b37f832e142d
SHA512 a9b7ad7825c06296a01a02a6fc287c231470b9ad105ee6d5a5006c5521eed3a41d0f99b4c97262dad0a718b62bb25e52ec0fd469fad8699f8ab651ffcf14b4d2
MD5 SHA1 SHA512

windows x64

Minor OS version

Major OS version

Entry point

4180

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

241B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

zseg

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

wseg

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

bseg

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

kseg

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

file

core.bat

license.dat

pistol32.tmp

gdi32