8d7bef5898b4b11c720527829e481d5a5f039309eb7213ba61481f6e7f291d3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d7bef5898b4b11c720527829e481d5a5f039309eb7213ba61481f6e7f291d3d
Size

74KB
MD5

0a4a889d633e87adf8517b3a8a523703
SHA1

b98e62bc10f9a709dbb22089ef561f0615b4fec2
SHA256

8d7bef5898b4b11c720527829e481d5a5f039309eb7213ba61481f6e7f291d3d
SHA512

3b5359dc8b772cf94f6bb815b8951bfc034114610a712ce3e519cb0faa55c825c9b7127950fa206761aaaa26ebbd9b89366a34d44b9c69574734f9358435df50
SSDEEP

1536:ie0M66SBKPlX+oM75zR4DlYewuXyQQSrg7NjVtZ83YacIyP/69QAq4:c1YlOL45YiPg7NlKYBbWq4

Score

N/A

Malware Config

Signatures

Files

8d7bef5898b4b11c720527829e481d5a5f039309eb7213ba61481f6e7f291d3d
.exe windows x86

d56e51843ea14f47669ad564023be524

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessWorkingSetSize
lstrlenA
AddLocalAlternateComputerNameW
VirtualQuery
FindFirstChangeNotificationW
QueryMemoryResourceNotification
GetTapePosition
SetCurrentDirectoryA
PeekConsoleInputA
VirtualUnlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE