8fe234bfcfb9787667286f15395c533d83eac091b505bb8ccd713f38c72804d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fe234bfcfb9787667286f15395c533d83eac091b505bb8ccd713f38c72804d8
Size

56KB
MD5

dffd56343fea3c49f71b1fdae506023e
SHA1

1287b49a7017ecc77a6712a140414f6925fde18b
SHA256

8fe234bfcfb9787667286f15395c533d83eac091b505bb8ccd713f38c72804d8
SHA512

54b4c2c6b55449eade9127144d5b5a1f1effa332add1575c01a32d0b5447199ab2b907d49bf0be65674adb62bcae0adab228547fb0006cf837cbe989f15e6519
SSDEEP

1536:MiPeajl8tVyTm1ImSviuNgB0tKb7C5t9+eNP7:M8iVy61I1KuyBpb7C4Wj

Score

N/A

Malware Config

Signatures

Files

8fe234bfcfb9787667286f15395c533d83eac091b505bb8ccd713f38c72804d8
.exe windows x86

dcf04c382b63295edd013f3604f72b5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
TlsGetValue
CreateMutexW
SetProcessWorkingSetSize
GetTapePosition
DeleteVolumeMountPointA
lstrcpyn
FindNextFileW
WritePrivateProfileStringW
CreateNlsSecurityDescriptor
GlobalMemoryStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE