e820bd12d15d3b1e3a01ab1e2b0eed0573a8fd399d89bcee55e42a49e6c5b0e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e820bd12d15d3b1e3a01ab1e2b0eed0573a8fd399d89bcee55e42a49e6c5b0e4
Size

94KB
MD5

5257ca79996ccd83f09ba7b42f5b6659
SHA1

69bdca97e4436765ebb7389ad7df4dc376b9b938
SHA256

e820bd12d15d3b1e3a01ab1e2b0eed0573a8fd399d89bcee55e42a49e6c5b0e4
SHA512

bbf8ac845ba5e8bbf6888c6d15ae8b956a8877633316c7ca8e9c669e6f7a685c11233df3fd7538c98b90f639d7211c9509e1b2f670b7e2f55336963a99922dfc
SSDEEP

1536:aSt2LdZToNT0lZ7UoOQgjoSgafUNFcxPErgIuJcJwmhc8YaEJwZK4/83ZoMOALFC:VtydZToNYlJUj8NexPug9J6fhZEXtpx+

Score

N/A

Malware Config

Signatures

Files

e820bd12d15d3b1e3a01ab1e2b0eed0573a8fd399d89bcee55e42a49e6c5b0e4
.exe windows x86

1bf8cf65f35c5ae418cc6ab0213b8f71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomW
PrepareTape
SwitchToFiber
GetFullPathNameW
IsBadCodePtr
RtlMoveMemory
ShowConsoleCursor
SetFileShortNameA
GetSystemDefaultUILanguage
VirtualUnlock
GetStringTypeW
EnumLanguageGroupLocalesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE