8fff191ec40000a586a802cf875ab9da09a2d600e828f5370edf9ea5adec7aa7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fff191ec40000a586a802cf875ab9da09a2d600e828f5370edf9ea5adec7aa7
Size

344KB
MD5

c64c44463504f3bc6c498a7028f270f9
SHA1

14f0b3568cf20bba566e4c27429d6c19fc734591
SHA256

8fff191ec40000a586a802cf875ab9da09a2d600e828f5370edf9ea5adec7aa7
SHA512

10aaa9850462347b76a2c70fd4c59f4de73ad030b7fbd356ac6f868c151c0367cdd22c0630c2457ab50f75599564fe603b554f00429aeda2225009ccab66fd7f
SSDEEP

6144:2c6ZZclfqmPgNKV7p5o41/fXLadRTHV2bVhKirgtHQm4e7/iIJ0:256lfqmoNgXLO12bVhKiLlI

Score

N/A

Malware Config

Signatures

Files

8fff191ec40000a586a802cf875ab9da09a2d600e828f5370edf9ea5adec7aa7
.exe windows x86

cf0c840c727c4e40934f34c9c4d7ffc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetCommandLineA
VirtualProtect
GlobalFree
DebugBreak
GetModuleHandleW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
Sleep
GetCurrentThreadId
DisableThreadLibraryCalls
GetModuleHandleA
GetStartupInfoA

msvcr71

free
strncpy
_c_exit
_adjust_fdiv
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_except_handler3
_exit

Sections

.text
Size: 328KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ