b8cf0d1c3468d7e2f591b2cb24635c2108b5cf66ae4cbfd0c3cb586ef1fc5d98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8cf0d1c3468d7e2f591b2cb24635c2108b5cf66ae4cbfd0c3cb586ef1fc5d98
Size

817KB
MD5

c26e7963a0fc25a338b9043df7acbb67
SHA1

1bdbb1f2a6e3f0a7571e91004a8019cb30bd9b38
SHA256

b8cf0d1c3468d7e2f591b2cb24635c2108b5cf66ae4cbfd0c3cb586ef1fc5d98
SHA512

6492776a726e72817db77d68a3284b892976edc47bf77b6888519e11aacecbc52ac8e8952e52726b97c6a941f1e5722f138aede0aea668ea45fab6e83127651e
SSDEEP

12288:teWukXIwfJ+WlMHz/SvZ80KVdNyDFSmISGx392jF7OelpG/XOydyEayBDKyp3:GktDqHz/SvZ8FdNyDFJGx3SAqeOUDBb

Score

N/A

Malware Config

Signatures

Files

b8cf0d1c3468d7e2f591b2cb24635c2108b5cf66ae4cbfd0c3cb586ef1fc5d98
.exe windows x86

b95feaef62597889676ea18a80fb4903

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
WriteConsoleW
TlsGetValue
FormatMessageA
VirtualProtect
SetThreadPriority
GetCommandLineA
SetLocaleInfoA
lstrcatA
GetModuleHandleA
GetPrivateProfileIntA
DeleteFileW
SetCurrentDirectoryW
TlsSetValue
lstrlenW
GetModuleFileNameW
GetCurrentThreadId
ReleaseMutex
GetFullPathNameW

apphelp

SdbReadDWORDTag
SdbReadStringTag
SdbReadBinaryTag
SdbReadDWORDTagRef

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ