b0e5d463116d72095cf3084af8fe55a18de41619bc474510d35ac760e43b1d82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0e5d463116d72095cf3084af8fe55a18de41619bc474510d35ac760e43b1d82
Size

999KB
MD5

e86320beaa0ee33faa24a1a5cbaed99a
SHA1

84ff5df51b89a7c0040ea7551125863b9bbf90a0
SHA256

b0e5d463116d72095cf3084af8fe55a18de41619bc474510d35ac760e43b1d82
SHA512

bb0c4d27292030a3fee5bedcc5d50c7acd9c14a57a4b6b9b61e350c0658f4d107e1a4df13bcce110c71963ba7d816ff542055e7120b8cb8ba6e6f1ea4d47ead5
SSDEEP

12288:pxzmJg5lSKRsd50cAFILB1J1BXBOIC44w01Wnn7DZYytB1ia6w:+ESysd50cYIV/1dBOICPl8nn7FYygTw

Score

N/A

Malware Config

Signatures

Files

b0e5d463116d72095cf3084af8fe55a18de41619bc474510d35ac760e43b1d82
.exe windows x86

4772a282eb6dc8978bceeba4e9b5c767

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
GetCurrentThreadId
GetVersionExA
GetSystemDirectoryA
TlsSetValue
WriteFile
QueryPerformanceCounter
ReadFile
lstrcmpA
SetFilePointer
GetCurrentProcessId
GetVersion
LCMapStringW
LoadLibraryA
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA

Sections

.text
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 635KB - Virtual size: 634KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ