8c1b90d863e219aa81e0810da0f654fb61e607e958bbb67609ea6b08d2238016 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c1b90d863e219aa81e0810da0f654fb61e607e958bbb67609ea6b08d2238016
Size

76KB
MD5

2ebaac56427e46842d5b1c2115061905
SHA1

def37d36b130783239f5f82cd7e9dec1d2c7f6e7
SHA256

8c1b90d863e219aa81e0810da0f654fb61e607e958bbb67609ea6b08d2238016
SHA512

283f8b477d902c322594f44a8f779ec308d4cb22d4ce1b3a76aaee0715264721ecf5da01186379ad291b561d56d220b059d8024831260433f89a08fa74622e94
SSDEEP

1536:4eaQwNhpO6PaaAK5f8FNmo3c1kX0XEiMsJpZ90pjVrs2ryrd1vUQuq6:49QwNhzPaaAekmx1kOEiMsfz0Hs2qo

Score

N/A

Malware Config

Signatures

Files

8c1b90d863e219aa81e0810da0f654fb61e607e958bbb67609ea6b08d2238016
.exe windows x86

e444a43d99ff5032adc92cf8c68ef3b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringW
GetHandleContext
GlobalGetAtomNameA
UnregisterWait
VirtualAlloc
GetDiskFreeSpaceW
GetPrivateProfileSectionNamesW
SetTapePosition
DebugActiveProcess
VirtualAlloc
_hwrite

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE