3a2adec778f7e73ae02e8a33e629520c8f72a719da98b54327f26f6d5b3217e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a2adec778f7e73ae02e8a33e629520c8f72a719da98b54327f26f6d5b3217e4
Size

63KB
MD5

0a12c757b7e11ae2c6357a72e6fba141
SHA1

a96ab041cd0d620e570f364579d3c10634dea5d5
SHA256

3a2adec778f7e73ae02e8a33e629520c8f72a719da98b54327f26f6d5b3217e4
SHA512

56a3d7291e76c96ef9105e6d5153e700bd19d4e04639e5d4a9d8b725c719b2ad5d699d633f2ce5c88845006d31283c45fcbe285c390af9111a9e523092edd318
SSDEEP

1536:a1rDbC0tiNMCHhf6aRX96ApoJg3Bc9vPEDmMCT:adDeAC956aRloiBkT

Score

N/A

Malware Config

Signatures

Files

3a2adec778f7e73ae02e8a33e629520c8f72a719da98b54327f26f6d5b3217e4
.exe windows x86

3355fbf869c8e05127a5dc2690e359c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDevicePowerState
GetProfileStringW
QueryDosDeviceW
FreeConsole
ConvertThreadToFiber
GetProfileSectionW
WriteProfileSectionW
GlobalReAlloc
SetFirmwareEnvironmentVariableW
UnlockFileEx
VDMOperationStarted

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE