ba2e8a4c6cc42aaa4e4a722e16170f87f6881603398e65b918c78ca8afd5d0b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba2e8a4c6cc42aaa4e4a722e16170f87f6881603398e65b918c78ca8afd5d0b8
Size

56KB
MD5

6d58b91515fe1e8d126622a19142c54d
SHA1

0682a119637357e3b4f2850696e4b6a19c9b46d9
SHA256

ba2e8a4c6cc42aaa4e4a722e16170f87f6881603398e65b918c78ca8afd5d0b8
SHA512

e3b157475737b15d76b8de59374731394dae42d101ddfe5fb3e83fc6c740de2458fb1e2fafa4256a126328aec51ea6f871e04a4b050c395ef117e088eb1903ab
SSDEEP

1536:JY2hr0iTtRhB4auUCzyPT9QfOhLVEvET5OQF5:JnptRhBp+8emLyvMF5

Score

N/A

Malware Config

Signatures

Files

ba2e8a4c6cc42aaa4e4a722e16170f87f6881603398e65b918c78ca8afd5d0b8
.exe windows x86

ee5b9723b6bdc7f41d9bc05d82d127b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
lstrcat
IsProcessorFeaturePresent
CreateFileMappingA
GlobalFlags
GetComPlusPackageInstallStatus
lstrcmpW
PrepareTape
FreeUserPhysicalPages
ExpungeConsoleCommandHistoryA
GetConsoleNlsMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE