d8b8f5b92cddef5354fb922320eb0617c7905c306e870ddf8b0857bc8547298d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8b8f5b92cddef5354fb922320eb0617c7905c306e870ddf8b0857bc8547298d
Size

62KB
MD5

95020303cc1ceaf78e2a3f7f4fa1dc9e
SHA1

25d56668d5fec5a57909bcc1525f2cc59a2b16d2
SHA256

d8b8f5b92cddef5354fb922320eb0617c7905c306e870ddf8b0857bc8547298d
SHA512

539c003b579a4af2afb0d42bf06633ad1e4180d001782e503e914dfcb82ab5244423bd2a9df93abf476c401c83fabfeee08adc99134e8a632ca06f76367ea8f2
SSDEEP

1536:YLAm35ej4pP+GozE0Pn5ob57pmxLBZNOnqQS7VgcJuVYy:y3MjqQwunqpYnNR7VgFVYy

Score

N/A

Malware Config

Signatures

Files

d8b8f5b92cddef5354fb922320eb0617c7905c306e870ddf8b0857bc8547298d
.exe windows x86

c86fb4165f463444b89a070175a5cc76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfoExW
_lwrite
GetUserDefaultLangID
VDMConsoleOperation
GlobalUnlock
lstrcpyA
lstrcpyW
InterlockedFlushSList
SetConsoleNumberOfCommandsW
RtlFillMemory
ReadConsoleInputW
lstrlenW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE