3a3c2cc702cab5cddb4064c2ed1fb1a0331849fc14988af123060dcd059e2ff8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a3c2cc702cab5cddb4064c2ed1fb1a0331849fc14988af123060dcd059e2ff8
Size

111KB
MD5

f580a06d663f995a31c4232a9feb4bc1
SHA1

8d813f525a6b9683788059792f493ea1a22bddf4
SHA256

3a3c2cc702cab5cddb4064c2ed1fb1a0331849fc14988af123060dcd059e2ff8
SHA512

dfacd8a4f654a46f175480b94f795b1bd7317a9ac1bfb51094ee129835a7bdacd60c1437b4b479a8b5be2e79d8ef914ec1f0d8cd0538277323ed9b15869af3e7
SSDEEP

1536:RTR4D0wsqlbHe/cDOo5sOSCw26IT+0akrpk2uaPpjVrs2ryrd1vUQuqXUt9qjUHJ:Rluxb+QhbwRxkNkbaPHs2qpP8Lpfk

Score

N/A

Malware Config

Signatures

Files

3a3c2cc702cab5cddb4064c2ed1fb1a0331849fc14988af123060dcd059e2ff8
.exe windows x86

d175ab4455d88b523db3839a9dbb296f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ZombifyActCtx
FindFirstVolumeMountPointA
EndUpdateResourceA
SetUnhandledExceptionFilter
FindFirstVolumeMountPointA
BaseInitAppcompatCacheSupport
Process32FirstW
FreeConsole
GetThreadTimes
SetVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE