34c3a6ea28618c30f9bd94605d8c5bed3b51d6fb1bedfcb56cf76b4a200e3fb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34c3a6ea28618c30f9bd94605d8c5bed3b51d6fb1bedfcb56cf76b4a200e3fb8
Size

204KB
MD5

678954f26a955219cfe3a797fd13269d
SHA1

08ebec8606475cc9525990b25d1295c09c14cb3c
SHA256

34c3a6ea28618c30f9bd94605d8c5bed3b51d6fb1bedfcb56cf76b4a200e3fb8
SHA512

a7b6f17786ce3279b2538f53d97b194a269d5969b453b49ea6eec0614b317054d92ada12954effdaee7519ee96faa276076495eb671147912e52b863ea3b623e
SSDEEP

3072:PFQxvNNw4WR8C9EIzWIlG0dMnHTpQUGgHwT4AfDan/DTD7jmFt/u1M73+x+OOpPy:GLNw4wPlN6H1wTzI/DvnOVSoOOpmL

Score

N/A

Malware Config

Signatures

Files

34c3a6ea28618c30f9bd94605d8c5bed3b51d6fb1bedfcb56cf76b4a200e3fb8
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

PMAppendLogParameter
PMCallISAPI
PMCloseConnection
PMDoneWithSession
PMEmptyResponse
PMFlushCore
PMGetAdditionalPostedContent
PMGetAllServerVariables
PMGetBasics
PMGetClientCertificate
PMGetCurrentProcessInfo
PMGetHistoryTable
PMGetImpersonationToken
PMGetMemoryLimitInMB
PMGetPreloadedPostedContent
PMGetQueryString
PMGetQueryStringRawBytes
PMGetServerVariable
PMGetStartTimeStamp
PMGetTraceContextId
PMGetVirtualPathToken
PMIsClientConnected
PMMapUrlToPath
PMTraceRaiseEvent
PMWriteBytes
PMWriteHeaders

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE