bcd33916496e34f2cae88a8927e22169fe692912f02e6ca3bf232225006b92d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcd33916496e34f2cae88a8927e22169fe692912f02e6ca3bf232225006b92d8
Size

91KB
MD5

0a65821984d41e1109873d5bbde6e599
SHA1

01f4651311066594fab4e1b9821169e7d983b27d
SHA256

bcd33916496e34f2cae88a8927e22169fe692912f02e6ca3bf232225006b92d8
SHA512

01a18d387ffad2e8e6235f6f8301e2a1815d0595f621c9449d16db964b433907795f83d10431da80ab0b71e580ccda2d261b7767f399b85dca9fbdd8852f8bdc
SSDEEP

1536:np8kz34+GJMgTnVXLMtJp0K+C2Vq+DOGKFDvISR:V3+JTXi41ZqGcLISR

Score

N/A

Malware Config

Signatures

Files

bcd33916496e34f2cae88a8927e22169fe692912f02e6ca3bf232225006b92d8
.exe windows x86

3d373ec8cae91e85af0936ed38f91a30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZCloseFile
GetCalendarInfoW
ShowConsoleCursor
lstrcpynW
TermsrvAppInstallMode
lstrcmpiW
FreeResource
SetConsoleTextAttribute
GetVersionExA
VirtualUnlock
GetCurrentProcess
EncodePointer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE