8456e71a3f37fa50d20afa22b3ee74a967351cb68d63027a585c130992e6d3eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8456e71a3f37fa50d20afa22b3ee74a967351cb68d63027a585c130992e6d3eb
Size

56KB
MD5

0c6dd406db3507965e5bbb71c7b76f88
SHA1

080b7d28f300398b35c619cdc097bd5a561bc4ad
SHA256

8456e71a3f37fa50d20afa22b3ee74a967351cb68d63027a585c130992e6d3eb
SHA512

c7ad0b55306c4d745b91932e9057801d6ff07b74c1a4d15af90612ec8b73f96347187e99ecaba14ebfb4ada8e1d39238cea88b849b3b35a52e3c9d8aa3b292b7
SSDEEP

1536:pq8r2X9Imy/Pct11e22GoE5CBwF5C85Gh:Ua2tIIzo6oEkU5CWGh

Score

N/A

Malware Config

Signatures

Files

8456e71a3f37fa50d20afa22b3ee74a967351cb68d63027a585c130992e6d3eb
.exe windows x86

785bb2b8d322ae93cd1870bd5569b109

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryA
GetVolumeNameForVolumeMountPointA
TerminateThread
GetVolumePathNameW
GetConsoleCP
SetFilePointerEx
RtlMoveMemory
GlobalHandle
GetVersionExW
DeleteTimerQueue
CmdBatNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE