1de74b41fbc1d56fb06cf6adab09c0f26313c808655bf2139ae142b809626ea2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1de74b41fbc1d56fb06cf6adab09c0f26313c808655bf2139ae142b809626ea2
Size

22KB
MD5

8a9607ed30e90f79273c13b9a66cd9f9
SHA1

218784e205805ed909b874ea65cfb6f1ccbf2aa0
SHA256

1de74b41fbc1d56fb06cf6adab09c0f26313c808655bf2139ae142b809626ea2
SHA512

cef43e1ed3ec0fcb2220491209a647b33fa31544996448936dee61fe04b46be728097ebda606cca3cc5d3ea7df38e097ad856851aba34f000202c0895d9bfde4
SSDEEP

384:gJ2ZfLunQP2WuABSQjeU4jFBY6msKIbAGqpAmbVGUiuPctyBqUrwVUfJ:gJ4fLcQPDsFORsKvR5GUZ+yBqUrwSfJ

Score

N/A

Malware Config

Signatures

Files

1de74b41fbc1d56fb06cf6adab09c0f26313c808655bf2139ae142b809626ea2
.dll windows x86

112fe8db160a6a3928828e24a2df9294

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetFileSize
GetModuleFileNameA
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
Sleep
VirtualAlloc

Exports

Exports

service

Sections

.flat
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE