8c407bb7161192ec65a7e031721cd4add8481a51e4082c2049a48ff35d0541ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c407bb7161192ec65a7e031721cd4add8481a51e4082c2049a48ff35d0541ee
Size

320KB
MD5

a21b9e5974186d132358802c606de7b0
SHA1

70160d9d0d30ecf160fb9cc2af86bb2277d215f7
SHA256

8c407bb7161192ec65a7e031721cd4add8481a51e4082c2049a48ff35d0541ee
SHA512

22bf5d515a19f6fc2845100f84d6da51532af74f19484e64ac6001664dca89400470df80f0373764d38ca9986a6e280ff5fb74d09ad87f1af4ed10c82bc741e0
SSDEEP

6144:PtdQlUpH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Pt3h2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

8c407bb7161192ec65a7e031721cd4add8481a51e4082c2049a48ff35d0541ee
.exe windows x86

d36ff04f3af369fba84ef43465b10314

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GetACP
CreateDirectoryA
GetWindowsDirectoryW
GetModuleHandleExW
lstrcmpW
LockFile
SleepEx
LZCloseFile
InitializeCriticalSection
GlobalFindAtomA
DeleteTimerQueueEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE