8eba667ca263da55cacf15a4f4824d96e009cd642be02aaca70617137696190b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8eba667ca263da55cacf15a4f4824d96e009cd642be02aaca70617137696190b
Size

63KB
MD5

810d2c046ce4385b112bd9de70471300
SHA1

33a53d095023f008d77a11c83d42fcaae79ad60f
SHA256

8eba667ca263da55cacf15a4f4824d96e009cd642be02aaca70617137696190b
SHA512

fda724b3a5788438520844d8709107aa956c18024abcd7d9b9d5e4ac5704e2a394b53812f6c41e667ef1e168172fdbee03aea2ac79ec6edb42d6e4deb4dd2777
SSDEEP

1536:C69gfZP/Q2rvzA3I5OMPmmjBYuMY0QEZiRQ7nV:J90C2js3GxPmehMSEYRKnV

Score

N/A

Malware Config

Signatures

Files

8eba667ca263da55cacf15a4f4824d96e009cd642be02aaca70617137696190b
.exe windows x86

474d3a5c7ff89a24bf30bb0917b739e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessShutdownParameters
SetConsoleOutputCP
SetTapePosition
MapUserPhysicalPagesScatter
MapViewOfFileEx
SetFileShortNameA
GetModuleHandleW
EnumLanguageGroupLocalesA
lstrcmpiA
GetBinaryType

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE