e8bddd14855a26462b6dcf0fa216536431855e81065be5e36787c54421997cae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8bddd14855a26462b6dcf0fa216536431855e81065be5e36787c54421997cae
Size

1.6MB
MD5

170525de207588fd3e3ee4e419d1cbf2
SHA1

0c8a04408e50fc99607b0dfdee3fb9953165f63e
SHA256

e8bddd14855a26462b6dcf0fa216536431855e81065be5e36787c54421997cae
SHA512

f5a3a8496b6072ad93702ab070335aaf2b00fc32c178287f4c33d6fdaeea631c161d6d16f558b0ca6ba221690c919adfdfe9deabd74110a89758598c5caca000
SSDEEP

49152:rliKy6E6qTaK8OGuT3yJyiIZEIoSpJHlBxSrKONc3/e:wKo6quKoujy82IZFIc3W

Score

N/A

Malware Config

Signatures

Files

e8bddd14855a26462b6dcf0fa216536431855e81065be5e36787c54421997cae
.exe windows x86

cde0a219f8ff2e695c89dba0042b6865

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
WriteFile
ReadFile
SetFilePointer
CreateFileA
GetTickCount
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
Sleep
GetTempPathA
lstrlenA

shell32

ShellExecuteExA
ShellExecuteA
SHChangeNotify

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ