8878eaa0578c9ffa73c749a0e7d15d49e6c9b6df7c582f5eebf0f7443d1aa6a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8878eaa0578c9ffa73c749a0e7d15d49e6c9b6df7c582f5eebf0f7443d1aa6a4
Size

63KB
MD5

1203291ccddc9a9e053bf2750b5d0c40
SHA1

fecd47159d386fa8a2a7a627eaf5e05ad7a2ef31
SHA256

8878eaa0578c9ffa73c749a0e7d15d49e6c9b6df7c582f5eebf0f7443d1aa6a4
SHA512

bad36476604400bec3826a42702149ef2bc64c039c7428adf61c4f58d53d455fbd1bb005513c535b82abe5f8259f2c98ae9b41272f84fd68d1e40cee94d184d2
SSDEEP

1536:9xA3tsnYGmJTy8sCOOjt94/KeEpTOvOgbks:9alRXQKeE90OCz

Score

N/A

Malware Config

Signatures

Files

8878eaa0578c9ffa73c749a0e7d15d49e6c9b6df7c582f5eebf0f7443d1aa6a4
.exe windows x86

4056645e60e572e7681aefcea869184d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeNameForVolumeMountPointW
OpenMutexA
VirtualFree
SetPriorityClass
GetProcessWorkingSetSize
LZOpenFileW
GetConsoleCommandHistoryA
OpenWaitableTimerA
GetStartupInfoA
GetModuleHandleExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE