8cc378bff40dc11ef3f0306c13490bd39a9e0f8831513d878a004aec726f27ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cc378bff40dc11ef3f0306c13490bd39a9e0f8831513d878a004aec726f27ca
Size

76KB
MD5

0c80eee0d992db8741b2d311b5a64072
SHA1

0104644a811a194b5fbcd5d5f6a3312f1da350d5
SHA256

8cc378bff40dc11ef3f0306c13490bd39a9e0f8831513d878a004aec726f27ca
SHA512

74ef46e029ab8bb5304c4580a582671805e139eb09cb7ffb6d6ee531166945400bb21085cad97f0e8a5a719b289b781b9c0ba18450b9fb549a8e9edc22c0639c
SSDEEP

1536:HJHFD+F0OG9yCgEGIdHVxCM44P1VlRHO3CLfYTL4zSlA4mIIpjVrs2ryrd1vUQuP:HJ5aMlRGIdHVxx/TjLA3Yi3mBHs2qo

Score

N/A

Malware Config

Signatures

Files

8cc378bff40dc11ef3f0306c13490bd39a9e0f8831513d878a004aec726f27ca
.exe windows x86

9838893c9f3f3507922c22ab7cc9f24b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNextVDMCommand
SetNamedPipeHandleState
SetVolumeMountPointW
lstrcpynA
GetConsoleAliasW
WaitForSingleObject
lstrlenA
IsProcessInJob
PostQueuedCompletionStatus
GetTempFileNameA
GetExitCodeThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE