dd126c89c1b52159238fe3e1b5d3e39d7779f86bf1bf5a7c914b475015ff9255 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd126c89c1b52159238fe3e1b5d3e39d7779f86bf1bf5a7c914b475015ff9255
Size

83KB
MD5

6fe1d5071878733adb506b78eb515b10
SHA1

6af127a1729a1bf9026d115c1a8f853cbabed19d
SHA256

dd126c89c1b52159238fe3e1b5d3e39d7779f86bf1bf5a7c914b475015ff9255
SHA512

0449e38d1dad2ab401efb055814fbff40fa8f466057e51d41a5a872b996c2ab9aebbd9fc85387e3297a116dbd3d8fae0317b7585432eb5c3f4e34f20dbdf8d6a
SSDEEP

1536:Q0IWcaNUEuMDUcxRbf3jaANrNmvkNxzlPa7Mo9SQjEErxTWDTMqhGKYIZTET8bDQ:nPxE2eU8z9SQjBkMqhGKZTbbc

Score

N/A

Malware Config

Signatures

Files

dd126c89c1b52159238fe3e1b5d3e39d7779f86bf1bf5a7c914b475015ff9255
.exe windows x86

72b1b701ab795276de03bce79c2ef290

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlFillMemory
MulDiv
ReadProcessMemory
GetFullPathNameW
GetConsoleAliasExesLengthA
CopyFileW
FindVolumeMountPointClose
GetCPInfo
SetConsoleCP
DefineDosDeviceW
VerifyVersionInfoW
SetFirmwareEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE