8e9864315297f8b7509700b88079cf6797009d9d75adec51de197b98687bcd49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e9864315297f8b7509700b88079cf6797009d9d75adec51de197b98687bcd49
Size

56KB
MD5

1719dde6ada1f340dd17a172587eddb3
SHA1

62d5843f50ef7dc0aea4d27a1d28091cb6d21426
SHA256

8e9864315297f8b7509700b88079cf6797009d9d75adec51de197b98687bcd49
SHA512

916eb04843257c4c57e64348adc7912e33ba6a529fe29283b86fb3255c68b6ce11138d6fe5451bf0b7b6958a43d8873a06440d049cf767ca187de99bbc941a49
SSDEEP

1536:b6l2pWJMRXGBJvxJiG4/NP4oZ4XVqk8ZZIuMub4dSV:el2puxBJvz4/NP4oZ4XV4g6bQy

Score

N/A

Malware Config

Signatures

Files

8e9864315297f8b7509700b88079cf6797009d9d75adec51de197b98687bcd49
.exe windows x86

710dd5e175bab51fc0b369f20ee71fd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
GetUserGeoID
Thread32First
EnumCalendarInfoA
SetVolumeMountPointW
Module32NextW
GlobalAddAtomW
SetConsoleIcon
CreateProcessInternalW
GetProcAddress
SetTermsrvAppInstallMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE