86c1462abfbac96a5b9babbb5fcbb03893afb813e67f02f4a71f8f3e4726fad0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86c1462abfbac96a5b9babbb5fcbb03893afb813e67f02f4a71f8f3e4726fad0
Size

66KB
MD5

6e90c2e3694683ad0df9d20ab1baea0b
SHA1

2ddfb7d639fa78de42f9ad4f33a57ad42a964031
SHA256

86c1462abfbac96a5b9babbb5fcbb03893afb813e67f02f4a71f8f3e4726fad0
SHA512

8fe70be7f396c6f3cd23928a9f30c0d80f93b4ff949da3ccdbd9c867307e6c30d1000569ebbe4736709a52f7d88cb1e5a11bc37187cc85ae246725015875748a
SSDEEP

1536:b0cL4vj1r20rq9e5U7vL784Q6u8QlqS57JXDBnlBGVTDr:a2BAcvL7nQplp57VDxnGVTDr

Score

N/A

Malware Config

Signatures

Files

86c1462abfbac96a5b9babbb5fcbb03893afb813e67f02f4a71f8f3e4726fad0
.exe windows x86

2b3cc7899fda306c1a5ef8ae11f440ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
CopyFileExA
VirtualProtectEx
QueryActCtxW
IsBadHugeWritePtr
GetConsoleCP
RtlUnwind
SetFileTime
SuspendThread
BeginUpdateResourceW
GetFirmwareEnvironmentVariableW
GetNumaHighestNodeNumber

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE