8e4528e8f5269413a29183c4b892fcbbf0564ed46f592caf75dd3326ccfce153 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e4528e8f5269413a29183c4b892fcbbf0564ed46f592caf75dd3326ccfce153
Size

92KB
MD5

57cba9c5c70df0b2672f4f5a7afc9240
SHA1

65c1b8a3d64e4a6a1cecf34c4e83a105f282ad44
SHA256

8e4528e8f5269413a29183c4b892fcbbf0564ed46f592caf75dd3326ccfce153
SHA512

b54696838ed6421f08b1f78531357fce76de53d707565eb65d0d40f0c256b9c7b6f71527b4618f8291195af4335d10dea4c13666c0dbbabdcee4987082df9ef2
SSDEEP

1536:NFUHYUhtI/y5zUyr0Qcb70x7zOcGw5dNyZ83YacIyP/69QAq0Gb8/Z5H83oKz:LUcrnnf0x7mC3iKYBbWq0GQP0oKz

Score

N/A

Malware Config

Signatures

Files

8e4528e8f5269413a29183c4b892fcbbf0564ed46f592caf75dd3326ccfce153
.exe windows x86

82bce7b4b76f4b2266de702b597687f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeW
GetCommState
EnterCriticalSection
CreatePipe
SetProcessShutdownParameters
NlsResetProcessLocale
MulDiv
RegisterWaitForSingleObject
GetFirmwareEnvironmentVariableA
DeleteVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE