858eb49514de4139c0f5088dca09f97cd89bf594efab394102d1912c20326dfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

858eb49514de4139c0f5088dca09f97cd89bf594efab394102d1912c20326dfb
Size

73KB
MD5

661ed358ab885b0c3b0d8c017ace0d0a
SHA1

4799ee3cddedb25f4485905ff367bf7914b6c47c
SHA256

858eb49514de4139c0f5088dca09f97cd89bf594efab394102d1912c20326dfb
SHA512

16dc4b08641c81b5797cdfe4cfb90eddcba723bcee39ebba1a5036bede7474aa6ed5405bbf53a79a5f83b8b88cf415a706511925046c6a666c252fd1d0b08df6
SSDEEP

1536:DaKDWqK3O85zFXbZKgMVWgEZ+RIxAxNh7hdq1:DVK3D5RXbwgMHEZ+R8Ao1

Score

N/A

Malware Config

Signatures

Files

858eb49514de4139c0f5088dca09f97cd89bf594efab394102d1912c20326dfb
.exe windows x86

0b75b6b54604a6c13a3ced7b4e226675

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
SetProcessShutdownParameters
GetShortPathNameW
CreateProcessInternalA
FileTimeToSystemTime
RtlUnwind
HeapCompact
EnumSystemCodePagesW
GetConsoleMode
DeleteFiber
BaseInitAppcompatCache

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 58KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE