b2e892a84f709d716ab607325430d073c346091029ff4e30e737d714be9efd7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2e892a84f709d716ab607325430d073c346091029ff4e30e737d714be9efd7e
Size

163KB
MD5

699e71f5f0307edbdfe99c62ceefd517
SHA1

3a36a6fa1b0a1a363561e29636a4824b94b1f4b0
SHA256

b2e892a84f709d716ab607325430d073c346091029ff4e30e737d714be9efd7e
SHA512

e704c0126fe89209511b9048eee2a70507a08175205efa27f696bd42f0e95065b89f3fe2ddbdf8235b05795a3b823942decb6d639b57f2ac633dc9d39b01c927
SSDEEP

3072:mwBrnjLsdqlpGy4WG3KJT2OQQvGsImTi+lYUXFvtNTOp8mX3/nYs5aWuj:ZBrnjL0qlsPWgaPOsFWSYIFvtIumPYsI

Score

N/A

Malware Config

Signatures

Files

b2e892a84f709d716ab607325430d073c346091029ff4e30e737d714be9efd7e
.exe windows x86

9b3794d08e0e7cdf45a7a427935cc44a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
InterlockedDecrement
IsValidCodePage
lstrlen
ReadConsoleA
EnumCalendarInfoA
EnumDateFormatsA
LoadLibraryExA
ScrollConsoleScreenBufferA
CreateNamedPipeW
BackupRead
GetNumberFormatA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 148KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE