34db97a559e6dcf476d2970bf05f77fdf0938092fa011582436493aea52929b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34db97a559e6dcf476d2970bf05f77fdf0938092fa011582436493aea52929b9
Size

84KB
MD5

5bd4f945a6dcdd2fb22de4f680fa9162
SHA1

601afd38f31c41e0928f79e3ce0dced8ad611b0c
SHA256

34db97a559e6dcf476d2970bf05f77fdf0938092fa011582436493aea52929b9
SHA512

91d818cc154b45fe91908716dd2a38a61a4f038fd361258c99ca2de44b235b2047212f5fb109f2986d71444a4cb7dcc83b20f79a46e51e79ad3f35de3b7ee0b8
SSDEEP

1536:hf/JW4Wwr9YUriw59WailzEG6OOUVUMW9PhkczMJ8SM94BccIsCLrW1QLo+4:BVFGe9ub6OOCW9PhkJXM9Fcs/CQS

Score

N/A

Malware Config

Signatures

Files

34db97a559e6dcf476d2970bf05f77fdf0938092fa011582436493aea52929b9
.exe windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 64KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE