3c49476f1ba428cb4041a71314dc1a9c6b8ffe65dd111096d7192303f140f91d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c49476f1ba428cb4041a71314dc1a9c6b8ffe65dd111096d7192303f140f91d
Size

100KB
MD5

66ded3389cc2ee1ee16d23dbdbd69f18
SHA1

d2757627ca5839e0a1feea8b222fc0af046f4ee8
SHA256

3c49476f1ba428cb4041a71314dc1a9c6b8ffe65dd111096d7192303f140f91d
SHA512

068f2b669118cd1a6df5c032004c5900075a16fc88d6ef93ed91697b90c0dfbdc96319109e0114826b34a9aedf220bce3fbee152a34611953a5eda0690686f33
SSDEEP

1536:sVWrFuYcWVGEF26wIdn9QyDcYXiOsMsTAM1qeOLuf9xDcesmu2JWa7PfAk4:qwcSH2pIPQIvXd8MMsAc5Sx/4

Score

N/A

Malware Config

Signatures

Files

3c49476f1ba428cb4041a71314dc1a9c6b8ffe65dd111096d7192303f140f91d
.dll windows x86

d1bba01cde9e25e1e8ffebd54b7ddaf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
BackupSeek
OpenWaitableTimerA
InitializeCriticalSection
GetWriteWatch
QueueUserWorkItem
GetCommTimeouts
GetConsoleCursorMode
WriteTapemark
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

itext
Size: 8KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ