b89820d41eefa3979afa2e7981eacc5bfa355881df485405374d59daec91d18d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b89820d41eefa3979afa2e7981eacc5bfa355881df485405374d59daec91d18d
Size

63KB
MD5

8389ac0b3a922710808d38496410416b
SHA1

da2ee31ae2241fea466046262a562aadb02178bd
SHA256

b89820d41eefa3979afa2e7981eacc5bfa355881df485405374d59daec91d18d
SHA512

9bed1ec7b9ce76c611edb444a165721721a3ef9260f887dcb7edc4941b82857b012e845ffcc7b4eab6785ec63544a1a3cdc3e2b6813a184a5c3572bf5917d666
SSDEEP

1536:vAFLetb6trZQCu8KqkfhQcrJ8T07FIswJonqU6ysNpdMDLZ:v6+KdKqzy8TRo6ysDmh

Score

N/A

Malware Config

Signatures

Files

b89820d41eefa3979afa2e7981eacc5bfa355881df485405374d59daec91d18d
.exe windows x86

23cdf5a20920a3a30b2402965d683252

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessTimes
IsBadHugeWritePtr
GetLogicalDrives
CmdBatNotification
CreateThread
LocalShrink
SetConsoleActiveScreenBuffer
EnumDateFormatsExW
DecodeSystemPointer
QueryDosDeviceA
SetThreadExecutionState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE