856d44d8a43ca95029e61c13d0202d117084ff6f6b969fc49773c66e0694b149 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

856d44d8a43ca95029e61c13d0202d117084ff6f6b969fc49773c66e0694b149
Size

56KB
MD5

0d93aff6bfc977809767149b7b65b5da
SHA1

0811df820d11d1b9685f7f74942d082d30b0cfad
SHA256

856d44d8a43ca95029e61c13d0202d117084ff6f6b969fc49773c66e0694b149
SHA512

a5698f11456f771b765ede871723288001e1c68ce8b3369523cf6e5f6288ec73d5d429a02e30304c6c82b0250b8c2077d017878d44d207dad5c283e19dc8cbd7
SSDEEP

1536:EVjymy7ygrb9AdSx/V7bfs5LIBQdpX1fLmT:OtsbcaxU5LIBgX1fLi

Score

N/A

Malware Config

Signatures

Files

856d44d8a43ca95029e61c13d0202d117084ff6f6b969fc49773c66e0694b149
.exe windows x86

a94b35de184608fbb7fd509f8e80cd16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GlobalLock
MoveFileW
SetThreadContext
lstrcpyn
GetNumberFormatW
LZRead
UnmapViewOfFile
WriteConsoleA
GlobalWire
GetDateFormatA
GetThreadPriority
WriteTapemark

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE