b2ae71103b67a224fc7e2de31b2ae035891eac660d643d6c4be5a1fcb8f1b41c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2ae71103b67a224fc7e2de31b2ae035891eac660d643d6c4be5a1fcb8f1b41c
Size

171KB
MD5

0de9e1a4cb855546f6ebcc5c864ad219
SHA1

efabf152588aeb22a5fb6a0e48ad40f0eea8e15b
SHA256

b2ae71103b67a224fc7e2de31b2ae035891eac660d643d6c4be5a1fcb8f1b41c
SHA512

7c4bef02bf20fa68b6c9c8c2dafe265fe3d18922e5c79200e43badccd45ccb62d63d1ff26462042f14447ad9f878007b4b8c134eca3ce09fe0f6457d851fbad3
SSDEEP

3072:R/MBCrctrQnPRjE9pwh4Hpv4GQpCzk0aS/Dg5a3HkobfQ1:REgQtABKRJA9pCza/5AHfU1

Score

N/A

Malware Config

Signatures

Files

b2ae71103b67a224fc7e2de31b2ae035891eac660d643d6c4be5a1fcb8f1b41c
.exe windows x86

90a3dbbef31ca29a9c5313866e7d2e44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetCurrentProcess

gdi32

GetDeviceCaps

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 249KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE