bad895ad5bea5d66b363a1cff4e291d398e57a2dbb722706193db80f7c1a073a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bad895ad5bea5d66b363a1cff4e291d398e57a2dbb722706193db80f7c1a073a
Size

91KB
MD5

1a28756c845644e5c309c85e04d2f5a0
SHA1

29280325df48054976664d08a625f648fa65e527
SHA256

bad895ad5bea5d66b363a1cff4e291d398e57a2dbb722706193db80f7c1a073a
SHA512

1210e3851b217faedda55217a13ce43f124560465f43f5ac6915d9b8d9b957d56535d7d8f3c7b9738d6ab1100200d5f8080566934ab1588d6396838197277162
SSDEEP

1536:7ah1hCXmQn3zxX+vRohwYMh4q3rhDzuoinc+5IKmQpMrTopZWm8NoorK+m5k:7arhCTxulh4q3rBJEIWMTkWmyoY

Score

N/A

Malware Config

Signatures

Files

bad895ad5bea5d66b363a1cff4e291d398e57a2dbb722706193db80f7c1a073a
.exe windows x86

8c7a7d79a22b9a32f68c5e2b1a473be4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_hwrite
FreeResource
LocalAlloc
FlushViewOfFile
GetNumberOfConsoleInputEvents
GlobalAlloc
ReadFile
CreateMemoryResourceNotification
ReleaseActCtx
SetTapePosition
GetAtomNameW
WaitForSingleObjectEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 76KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE