8dc090bf3e0fa72f1d13263081c613df485200ce3ae6dac2b34875afefb4a4a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dc090bf3e0fa72f1d13263081c613df485200ce3ae6dac2b34875afefb4a4a6
Size

59KB
MD5

00becd769c57a21079e09551d9a42bd4
SHA1

8ac1ebc6c06ec17f5875795b7005cecfeaafc571
SHA256

8dc090bf3e0fa72f1d13263081c613df485200ce3ae6dac2b34875afefb4a4a6
SHA512

be4ca6a3052fcc24909789b861381e28123f8423aedb3b25ad09f1e25e5368f708a42bba197dfd39c5346d22db047f746e7e5c2a8596d5042d98cafe29bd0dd1
SSDEEP

1536:CwtZoNYN9YAFgWDL+CKbWC7Tg+SuvT3W+dBP9hgES:CwjoNYzYygQSFWyT/SLES

Score

N/A

Malware Config

Signatures

Files

8dc090bf3e0fa72f1d13263081c613df485200ce3ae6dac2b34875afefb4a4a6
.zip
Reloz.exe
.exe windows x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
reloz.txt