8be78949b703c06ef6585d06026904185467754e30865943282a12f83a34fd49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8be78949b703c06ef6585d06026904185467754e30865943282a12f83a34fd49
Size

76KB
MD5

a226d6390a92bb1243e894daec524920
SHA1

2a04fcf8b538a89399543f81ad63599c62088a36
SHA256

8be78949b703c06ef6585d06026904185467754e30865943282a12f83a34fd49
SHA512

24b4bfddafc8a63452815a2c2d0750511edc6ddee2112d7f1207dead38df6b92f923e0d0dfd977fcd3dbaeb3ae9eb66bf193deb93b641f224b11d3ded60144fd
SSDEEP

1536:KxlmkUMmlGWrsCNMh27SjBY3szrJ7EEXLasLpjVrs2ryrd1vUQuq6:KlmQmln5MhESdS0JXLzHs2qo

Score

N/A

Malware Config

Signatures

Files

8be78949b703c06ef6585d06026904185467754e30865943282a12f83a34fd49
.exe windows x86

9a0daa960d139ae8b6b88a973f237142

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
DefineDosDeviceA
GetSystemInfo
Process32First
SetCurrentDirectoryW
lstrcmpA
GetSystemWindowsDirectoryA
HeapValidate
GetConsoleProcessList
SetVolumeLabelA
InterlockedIncrement

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE