b896c03b19aa841caa0c56f5114000131b3c563e78b732d964a8464628ae694d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b896c03b19aa841caa0c56f5114000131b3c563e78b732d964a8464628ae694d
Size

91KB
MD5

5aa147408fcfb17aa8c3c64ef99e70e2
SHA1

7215003f22504e456f65d21ca6b4d84aafcfeb9f
SHA256

b896c03b19aa841caa0c56f5114000131b3c563e78b732d964a8464628ae694d
SHA512

a0157e46a829411d0bfe8230fa3ca54a094c47a8cf5f91911d9dac4c257f3ff38564b63afe9297fa55d0a0f11f912a2429d65d38ed150d7f66b6297cbfd5f872
SSDEEP

1536:EF9B70WnJZ3SCBed38H1SHjFyuMGni/A+uxJx5uvcnpzSdGvBz:yD70WnsPHpyuMGnowxU0pfpz

Score

N/A

Malware Config

Signatures

Files

b896c03b19aa841caa0c56f5114000131b3c563e78b732d964a8464628ae694d
.exe windows x86

2206624a79aee62fefe35b8bff323541

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
EnumSystemGeoID
GetDefaultCommConfigA
GetProcessVersion
IsBadCodePtr
SetProcessDEPPolicy
QueryDosDeviceA
VirtualQueryEx
FindNextFileW
LZStart
WaitForSingleObject
WaitForDebugEvent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE