d8d830ea06520085853d00718c6df0c2faedf6ebc640ab523d7552addc0d5ba2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8d830ea06520085853d00718c6df0c2faedf6ebc640ab523d7552addc0d5ba2
Size

448KB
MD5

92a8d228701ddaba4a4753070dd47040
SHA1

45dafe9b1991b24564e5e8167457b125b3981126
SHA256

d8d830ea06520085853d00718c6df0c2faedf6ebc640ab523d7552addc0d5ba2
SHA512

7376a2eeaeef2892d44456cf21831b51365f7194844080b9aa1818dad936a4a9a17c71f20dd05953c2a51e23c9de0b9cc9ce7b6825bf782a86c57b59f82528b4
SSDEEP

12288:n2yKqmXps3j1t62b3ASLHtAxQWZto9wGh+jtFEByPIrH73sQ+:n2yKNpW1t628SjkQWo6QK+73L+

Score

N/A

Malware Config

Signatures

Files

d8d830ea06520085853d00718c6df0c2faedf6ebc640ab523d7552addc0d5ba2
.exe windows x86

35ee965248b9ee251928811baeff34c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtSaveKey
RtlGetCallersAddress
NtFlushWriteBuffer

kernel32

GetCommandLineA
GetSystemDefaultUILanguage
GetConsoleWindow
GlobalAddAtomA

Sections

.text
Size: 441KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE