82b9f784e32a60d96f2889be1e9d109a3481ef70477c9958af419b3312bcab4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82b9f784e32a60d96f2889be1e9d109a3481ef70477c9958af419b3312bcab4b
Size

56KB
MD5

edd46a91133c6bea604a86388ebcbfd6
SHA1

4bd3b9831e0b7c5d6762ef418f6f4bf5e7f43cf9
SHA256

82b9f784e32a60d96f2889be1e9d109a3481ef70477c9958af419b3312bcab4b
SHA512

c4c11f7db6dca2b56eb574a620c15fca57a2cde301cd3b37a903875b31fed0caa3276b28a9864d59ccf5115fd67d01da0f56674280823a1ae49cd00eb0278989
SSDEEP

1536:9VWWGrsRpx9FHCUMxMhM2jTwTogekpl9mTCReI:/Cox9ZGTo7kpl9mTC7

Score

N/A

Malware Config

Signatures

Files

82b9f784e32a60d96f2889be1e9d109a3481ef70477c9958af419b3312bcab4b
.exe windows x86

7bca114f10144803e8eb1b63b7c95370

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileScatter
CreateWaitableTimerW
GetCurrentProcessId
SetConsoleNumberOfCommandsA
FindFirstFileExW
BaseProcessInitPostImport
BaseCleanupAppcompatCacheSupport
LZDone
NumaVirtualQueryNode
OpenFileMappingA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE