8fb7087890d497ea518b53528e96aed8d77658d03c5f84594e250fca6825a385 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fb7087890d497ea518b53528e96aed8d77658d03c5f84594e250fca6825a385
Size

320KB
MD5

0dc59333055e1c6376c36055777ae590
SHA1

de729aae25b27519c2653f8b575a7273537b8e6d
SHA256

8fb7087890d497ea518b53528e96aed8d77658d03c5f84594e250fca6825a385
SHA512

b036f41cef1f9359d485863fa790352a12ecce08674a878966881bdfbbc381049fd26ed7418357225698a4872207b2c2a23b224106de9c6f11e217d8a166fe40
SSDEEP

6144:/nrwH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:K2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

8fb7087890d497ea518b53528e96aed8d77658d03c5f84594e250fca6825a385
.exe windows x86

eb3f6eb81dc4cfdf9ee578773123f201

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
GetVolumePathNamesForVolumeNameW
GetACP
GetCurrentThreadId
EnumerateLocalComputerNamesA
GlobalMemoryStatus
CompareStringW
CreateFiberEx
GlobalCompact
OpenEventW
DeleteVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE