8f0a596e4630f92736c6a1b98c993cefbf1782c66993e1e9843dbf0edc2dd4bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f0a596e4630f92736c6a1b98c993cefbf1782c66993e1e9843dbf0edc2dd4bb
Size

63KB
MD5

dd942274f3bb91098f95bec0e4dff402
SHA1

7ba5f1f2194ce11414ab4b9103bd19c161f3d650
SHA256

8f0a596e4630f92736c6a1b98c993cefbf1782c66993e1e9843dbf0edc2dd4bb
SHA512

a996d2ca20ecb99f9c51e29fd956f619edab92420ef7da22372ef44f3b2a929818985d3e25917357683d2a8a77468c411c1330ff31f2fe1c3551e11ed2cbea20
SSDEEP

1536:2yLxEDUnJrhEpwzpCDZHnImhIQlEbVYIIsGQwcu:ZLuDUnJrhEpmCDZHIl+EJYIyQFu

Score

N/A

Malware Config

Signatures

Files

8f0a596e4630f92736c6a1b98c993cefbf1782c66993e1e9843dbf0edc2dd4bb
.exe windows x86

66d3771ed86eea3078f4d452376e0e86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadTimes
LocalReAlloc
GetLogicalDriveStringsW
TransactNamedPipe
OpenConsoleW
WriteProfileSectionA
FindVolumeClose
RegisterWaitForInputIdle
GetConsoleAliasExesW
FindActCtxSectionStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE