82814b892ff6bb5659659052dcdac6ff0f7b6cd4fc74d60fc8627384e97bd8d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82814b892ff6bb5659659052dcdac6ff0f7b6cd4fc74d60fc8627384e97bd8d1
Size

63KB
MD5

6f4c963e13eadbcf687500fd6a9820d1
SHA1

b617f8638154c1daa29ef61e1a5e6dd231f63170
SHA256

82814b892ff6bb5659659052dcdac6ff0f7b6cd4fc74d60fc8627384e97bd8d1
SHA512

011aca79060792ad1011b404b82001b528fc390cd07239e0fc9eb58660271d334b038764b8492295bd28b0fdbf09547c6e82e2e8a0a23a27f37054a7fdf93e22
SSDEEP

1536:sZBcTV9LMgCTU9KjH19Drq5Ficv6beZy66o3/d4mE/XNUMc34lx+:qBCWgCTOIHrukcyCsoPd4z/nlu

Score

N/A

Malware Config

Signatures

Files

82814b892ff6bb5659659052dcdac6ff0f7b6cd4fc74d60fc8627384e97bd8d1
.exe windows x86

9d53d404555293cf96592c6bcef5536d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
InterlockedExchange
GetSystemWindowsDirectoryW
GlobalMemoryStatusEx
EnumSystemCodePagesA
DebugActiveProcess
EnumResourceLanguagesW
GetCommandLineW
GetProcessHeaps
GetStdHandle
GlobalLock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE