814f59e299ced1a843712f01532776e2c003fb97d594a146e226348cfedf5dfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

814f59e299ced1a843712f01532776e2c003fb97d594a146e226348cfedf5dfb
Size

447KB
MD5

80bc11fa2bf6b56230095c0946f5af70
SHA1

a74191c8e893a3ffb9f7a3eac5ad5b6264839968
SHA256

814f59e299ced1a843712f01532776e2c003fb97d594a146e226348cfedf5dfb
SHA512

3e9ae95368e45f93e37354a0459659b7bce773cac44cb11867af99b0eeceb85109a6b5f7c073e57cfcf94793ad0056cb71189aa9222b727e27b5941f6493d7e8
SSDEEP

12288:h0jrHSQLMl1Vp+B8aZ4cT+wpcJRhcAMzamE72G:h0/3ol12B2woRWPzamE7l

Score

N/A

Malware Config

Signatures

Files

814f59e299ced1a843712f01532776e2c003fb97d594a146e226348cfedf5dfb
.exe windows x86

ed333aa039e49aba1e632ef708a9b8ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlEncodeSystemPointer
ZwOpenEventPair

user32

GetCapture
GetClipboardViewer

Sections

.text
Size: 440KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE