836974aa4c0a80cbf2a90c2e162f00c2f597b6eb516996e0408273b86e859400 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

836974aa4c0a80cbf2a90c2e162f00c2f597b6eb516996e0408273b86e859400
Size

115KB
MD5

8196f262d6cdbbf23b21f1d5cd9d7310
SHA1

a4a8734984f502ef206b3a788737d1ced5186e6a
SHA256

836974aa4c0a80cbf2a90c2e162f00c2f597b6eb516996e0408273b86e859400
SHA512

87f3dbf240519b9a9e69e48ca1f939624a00191b1664e30541d70e4669b147bc5ef50b7f5c160b5a5c2c3eb40f797782590dce382e68ba94e72e470e36a6189c
SSDEEP

3072:x2U6ESS32X9P5dnDYjBkMqhGKZTbzsRg:j6J56ibZL+

Score

N/A

Malware Config

Signatures

Files

836974aa4c0a80cbf2a90c2e162f00c2f597b6eb516996e0408273b86e859400
.exe windows x86

317a152381ed384201758dc30a35ec77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NumaVirtualQueryNode
GetAtomNameA
DnsHostnameToComputerNameA
SetTapeParameters
MapUserPhysicalPages
AreFileApisANSI
CopyFileExA
VirtualProtect
EnumResourceTypesA
IsSystemResumeAutomatic
Module32First

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 59KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE