33aaee220f1a883bb8d20ccad4ddd4faadb57750ba54c59b6cfdea038d4e556e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33aaee220f1a883bb8d20ccad4ddd4faadb57750ba54c59b6cfdea038d4e556e
Size

56KB
MD5

cf0cd4e80e4d4bef107c9f72eecc724f
SHA1

34a4083513793675a8f5be053de2711fbf50b6ef
SHA256

33aaee220f1a883bb8d20ccad4ddd4faadb57750ba54c59b6cfdea038d4e556e
SHA512

25420ff7806a7c7421a393f6f3b060515bbdeb3b87e934f4ad6acb1ce30df5afcd5dac14258a9bd73e6ac90c24638abdb83f0fdad21d97977f7693adf49ecd74
SSDEEP

1536:qAbQxb9nD5GAfKKcX/OgeprrjqSCrDXDoVd:ZUnZfHcvxepr3gDX0n

Score

N/A

Malware Config

Signatures

Files

33aaee220f1a883bb8d20ccad4ddd4faadb57750ba54c59b6cfdea038d4e556e
.exe windows x86

6bcb3b49f791841bd296ee61714fe2e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
CreateProcessA
SetProcessShutdownParameters
LocalSize
GetDateFormatA
GetCommState
InterlockedExchange
SetComputerNameExA
CreateDirectoryA
RtlCaptureContext
SetComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE