8d8a67bca5ce065363252087b58ec467ea79e2fa59585dee9fcc8e864b46cf41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d8a67bca5ce065363252087b58ec467ea79e2fa59585dee9fcc8e864b46cf41
Size

83KB
MD5

844e11c18cc0dd8e7f1549ef0add1470
SHA1

783799400feb46b54e7fbcb3d316194368e9d5ff
SHA256

8d8a67bca5ce065363252087b58ec467ea79e2fa59585dee9fcc8e864b46cf41
SHA512

995ac5837306f4d854e5befdcb3750003ce69c3c61463d76955a48e0acc7f6835e2f550a231790ba3938069fdf53a1cd82f1c266d2d176b9d04dacca40c3f198
SSDEEP

1536:q2R+bj9i/HxquRkWnfmhKOn49WIo4313jEErxTWDTMqhGKYIZTET8bDQ:qyYURxkoeKO44I/l3jBkMqhGKZTbbc

Score

N/A

Malware Config

Signatures

Files

8d8a67bca5ce065363252087b58ec467ea79e2fa59585dee9fcc8e864b46cf41
.exe windows x86

c0a42648dd9aa09e6a9d6707e1c0ab63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputA
NlsResetProcessLocale
SetFileApisToANSI
WriteConsoleOutputW
lstrcpynW
WriteConsoleW
CloseProfileUserMapping
HeapCompact
DuplicateConsoleHandle
MapViewOfFileEx
VirtualProtect

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE