8bb06d2adfdb5c7dde1b837cb4267d27811730eb91678778cea3db16db817e1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bb06d2adfdb5c7dde1b837cb4267d27811730eb91678778cea3db16db817e1c
Size

830KB
MD5

49127c7d25bcbd2cdbe3b56718ff3231
SHA1

fa2a259e77541b23f430f4be941c3014dadad5d5
SHA256

8bb06d2adfdb5c7dde1b837cb4267d27811730eb91678778cea3db16db817e1c
SHA512

f1d817cdb0e614cc45d0d6dc01c82b9b8e4bc5959169f1b22ceb4f015a7e87866bbff4e0697d73253edb63e109802e228b9ccd3f07e57af6e373c18e82c85622
SSDEEP

24576:m0tXcdh8NsptwLKQeGzaPsT/Upkmn8CNua:ZXyqNetPYaUIZn8Cd

Score

N/A

Malware Config

Signatures

Files

8bb06d2adfdb5c7dde1b837cb4267d27811730eb91678778cea3db16db817e1c
.exe windows x86

4e97fc8e7503dcd1973ba39c773e8297

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoA
GetConsoleTitleA
LeaveCriticalSection
SetEvent
FindNextFileW
WaitForSingleObject
GetLocaleInfoW
GetTickCount
HeapCreate
MoveFileExA
GetModuleHandleA
GetCommandLineA
EnumResourceNamesA
GetCurrentProcess
GetDiskFreeSpaceA
CompareStringA
CreateSemaphoreW

esent

JetTerm
JetStopService
JetUpdate
JetTruncateLog

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ADATA
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ