8889d7e6edd7cb82e3bb3b5c4e65b01ed0dceba6ede23631c4e841066dbc234d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8889d7e6edd7cb82e3bb3b5c4e65b01ed0dceba6ede23631c4e841066dbc234d
Size

80KB
MD5

82035402b60abf6838bb0249bce70718
SHA1

432b69322548b7fa37788152d2289e2ffe58da86
SHA256

8889d7e6edd7cb82e3bb3b5c4e65b01ed0dceba6ede23631c4e841066dbc234d
SHA512

0a385e949bfc9e5ca12a954663b5db34076cef7dadd1871c9569dbe2faec843901879b4d2d4ea7235db8aebfde0fd1298fb4aaaabc97f30e6ea20759fa9fc18b
SSDEEP

1536:bFpzjRPK+H0/nke+2V510KfNPohPb82hW8fPL:LvH6nt+8PWD8vYL

Score

N/A

Malware Config

Signatures

Files

8889d7e6edd7cb82e3bb3b5c4e65b01ed0dceba6ede23631c4e841066dbc234d
.exe windows x86

48a62972bd2faafb225c22db48a27c66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleInputExeNameA
UTUnRegister
InterlockedDecrement
GetVolumeNameForVolumeMountPointA
ZombifyActCtx
GetCompressedFileSizeA
GetShortPathNameW
UTRegister
GetQueuedCompletionStatus
DeleteFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE