0e2d8a00d63c392fe1e4a22b64dfe3c439622b2035d9d2e1e0418ac662f57c0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e2d8a00d63c392fe1e4a22b64dfe3c439622b2035d9d2e1e0418ac662f57c0b
Size

504KB
MD5

78e282dbb702e24c049afd4bb6482f20
SHA1

56b9cad76136cafe00406abcad57a0091ad1d473
SHA256

0e2d8a00d63c392fe1e4a22b64dfe3c439622b2035d9d2e1e0418ac662f57c0b
SHA512

6ee45b33af45979393150e3cdb362eab76131c94aa2f3fb6604dcfd9a7847f03355aa9b9b42121a75f6a13bf4cdcef20ba1a683ab5c0c468222703da04f482c9
SSDEEP

12288:hcBiE7J2i18jAKg8vteexM/TSbV+qcq+eivznGnkWAQGqDLK9K:hM/Mw8vtee4TSbMXvzniAQGqD

Score

N/A

Malware Config

Signatures

Files

0e2d8a00d63c392fe1e4a22b64dfe3c439622b2035d9d2e1e0418ac662f57c0b
.exe windows x86

8504de969b4d209311e7b12a2a3141e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetModuleHandleW
GetLogicalDrives
IsValidCodePage
lstrcatW
TlsAlloc
lstrcmpiA
GetModuleHandleA
GetStringTypeW
HeapCreate
HeapFree
GetExitCodeProcess
SetEnvironmentVariableA
GetStdHandle
SetPriorityClass
GetConsoleTitleA
SetFilePointer
GetShortPathNameW
SetLastError
GetLocalTime
GetDriveTypeA
GetLastError
GetTickCount

netshell

DllCanUnloadNow
DllRegisterServer
HrLaunchConnection
DllGetClassObject

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 498KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE