886d5c428a0cd79aa661ef8f785e4d70a9634dc4da671812569abc276fda0390 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

886d5c428a0cd79aa661ef8f785e4d70a9634dc4da671812569abc276fda0390
Size

76KB
MD5

38f408ed09e7af227b6a296cf0a198f7
SHA1

8a699eb3e5140f1f803e8c5f9768225bf77ace60
SHA256

886d5c428a0cd79aa661ef8f785e4d70a9634dc4da671812569abc276fda0390
SHA512

329780cd62e59dfc7221074ba1bc0d4fde91b3813c6f88a9ad664ed775903320fb45ca5d751cfcd71b6f71ebb184fb9ca58fd8aa5f496261eb90f88d53374612
SSDEEP

1536:HRtcfD5qy68nIl4S6DQFdnXXsEGc/y/MZaNW9VjpjVrs2ryrd1vUQuq6:He5R68I56eXOR2VjHs2qo

Score

N/A

Malware Config

Signatures

Files

886d5c428a0cd79aa661ef8f785e4d70a9634dc4da671812569abc276fda0390
.exe windows x86

3c1ab930f9a305156ddc415bf29963dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomW
lstrcmpA
GlobalReAlloc
InterlockedPushEntrySList
FreeVirtualBuffer
AddAtomA
GetCurrentProcessId
RtlUnwind
Heap32ListNext
IsBadCodePtr
FatalAppExitW
GetSystemWindowsDirectoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE