f855b34a5a046ec1e4d1b6ff814292072bc70f0db50d9a2c1a9dd688631c1d2f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f855b34a5a046ec1e4d1b6ff814292072bc70f0db50d9a2c1a9dd688631c1d2f
Size

91KB
MD5

8e7b32db1f055898d8cf9387f4a0f589
SHA1

c021b0259cdf3745604c3db1acf4fa21bd03a495
SHA256

f855b34a5a046ec1e4d1b6ff814292072bc70f0db50d9a2c1a9dd688631c1d2f
SHA512

25265b9ea8fe75adad8e54ab016ef06ad16a4dac294af698095f207ebde25d4ac3a3757d3ba16a9fb10e1bd47b23fe964bc29ceae00dd7cd7a1e3f477be1975e
SSDEEP

1536:a6j1HnatwjsXK0adVI3HvkcnHylsYNltvrkRTqtdPTpzmyPoNZI2SNK:LJjYwAHMOKsYyGtxpmyQNhSE

Score

N/A

Malware Config

Signatures

Files

f855b34a5a046ec1e4d1b6ff814292072bc70f0db50d9a2c1a9dd688631c1d2f
.exe windows x86

f1d8ccffff352f2662d39b289a5a9c35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CheckRemoteDebuggerPresent
EnumDateFormatsW
CreateFileA
GetTimeFormatA
lstrcpynA
EnumDateFormatsExA
DeviceIoControl
GetSystemRegistryQuota
EraseTape
VirtualLock
GetProcessWorkingSetSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE