8f850bbbc7998bc5d6da8487c3c2f56800710a7362d31c3423fb10bb14bd4d19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f850bbbc7998bc5d6da8487c3c2f56800710a7362d31c3423fb10bb14bd4d19
Size

150KB
MD5

cc6f00c29ff5eff5bfbfe393789eff22
SHA1

2b2298684210d1d8bbc44418f758bf7c35c990bd
SHA256

8f850bbbc7998bc5d6da8487c3c2f56800710a7362d31c3423fb10bb14bd4d19
SHA512

b477f65328940756c118f19b5c20a922d9cd84d4e74349d9d81b093786a3dcc27082a6a8e4eeedd20fa4786a1faa8b0dcfa8e4ad73748221a3e61b504194cbb1
SSDEEP

3072:JxU2/hjYLZluTBDWqf4ha0lfhHpirAOH11wYLIjSusYFjlRl:UGYL6TBDWqf4ha0lZUrdLwYL1upFj9

Score

N/A

Malware Config

Signatures

Files

8f850bbbc7998bc5d6da8487c3c2f56800710a7362d31c3423fb10bb14bd4d19
.exe windows x86

8b4cc2be0324264fac1338e1727600aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 136KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ