7b87d876468b2d61da4494522cf1806bacacab169ed3dae66664071bb9b2ea6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b87d876468b2d61da4494522cf1806bacacab169ed3dae66664071bb9b2ea6e
Size

830KB
MD5

1044202a1c254f633660c04f1bd85010
SHA1

b0f0f52bcfd1cf412097a850cf79b0a4d5bad056
SHA256

7b87d876468b2d61da4494522cf1806bacacab169ed3dae66664071bb9b2ea6e
SHA512

4264d4a2d9029c78f475b8ab2eb2ec7590ad53b0b5cdfc10288df89a2700bca943c4175e40b7a0d51f1ad94de6b261f8b8f8ddf081b2a411d24b93e58804e7f7
SSDEEP

12288:Z+xzAliTPZabUtUkP8RAdfdN4xf65QYhoHqUqYfXZA/JqkHiv1YS51rrYRiPA0fw:ZSAWSpR6dKEWYCH1l1pZYY40fV+814

Score

N/A

Malware Config

Signatures

Files

7b87d876468b2d61da4494522cf1806bacacab169ed3dae66664071bb9b2ea6e
.exe windows x86

cd857f81de83a2e1e36d5c6f442afb25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetConsoleAliasA
GetLocaleInfoW
GetCurrentProcess
OpenMutexA
GetDiskFreeSpaceA
ResumeThread
CreateSemaphoreW
WaitForSingleObject
CompareStringW
GetFullPathNameA
EnumCalendarInfoW
GetCommandLineA
CreateEventA
GetModuleHandleA
GetStdHandle
HeapCreate
MoveFileExA

hnetcfg

HNetGetFirewallSettingsPage
HNetGetSharingServicesPage
HNetFreeSharingServicesPage
HNetDeleteRasConnection

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_WRITE

.adata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ