8837be5548045552f262c393ae90d1e81e36bcb0b269e5fc47c76e2659318fb1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8837be5548045552f262c393ae90d1e81e36bcb0b269e5fc47c76e2659318fb1
Size

56KB
MD5

6d6482e9e3b6eb12854c02c4aac4f7d6
SHA1

a796721d7107447a0433d6dd43f365c06e7b5de7
SHA256

8837be5548045552f262c393ae90d1e81e36bcb0b269e5fc47c76e2659318fb1
SHA512

4ec2409ecfa652549ab2f842309fd311df4875edc4e7be697ee9b114314be063533eb7f83273985eeefd8a6d1e48dafffd54b5077f9b7ceaefd8fa07511a7052
SSDEEP

768:HOM2ETntZwDJ/sOhQkue5FYUsbwfVkCNjuwFGYHvs+f0sdwObxxq+R7fIYZwhKDu:/2dpkwdktu9sY0szbi+R7DZzTq

Score

N/A

Malware Config

Signatures

Files

8837be5548045552f262c393ae90d1e81e36bcb0b269e5fc47c76e2659318fb1
.exe windows x86

48cf1fd09e488f41398ef45c563666e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadModule
GetProfileIntW
CheckRemoteDebuggerPresent
MoveFileW
SetConsoleTextAttribute
GetVersionExW
QueueUserAPC
LZDone
SetThreadAffinityMask
GlobalAlloc
FindResourceA
Process32NextW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE