29002f3fcca5b52d637d0f8ac84159974663507d3238a1381bd2ebcdccdc3755 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29002f3fcca5b52d637d0f8ac84159974663507d3238a1381bd2ebcdccdc3755
Size

62KB
MD5

67eeaca04dd6bc19b7b2eb3508930140
SHA1

69ec27801e963c93ee443941735f0bf02d1f72db
SHA256

29002f3fcca5b52d637d0f8ac84159974663507d3238a1381bd2ebcdccdc3755
SHA512

89d7b46595d4b13b95aff54bcc452b3a85fedb6e56a20dfe76b369ddd292a1eb841522b805c5ded54e58cabdb4cee9b68e90cbb314f9717028646f0651391ec5
SSDEEP

1536:ROvKRYPffA0lrtFCA0KlRREdcp5rbGP1Iwp/tX:Qv9tFCA0Qa2pB6WwVp

Score

N/A

Malware Config

Signatures

Files

29002f3fcca5b52d637d0f8ac84159974663507d3238a1381bd2ebcdccdc3755
.exe windows x86

1dd662aa51f2bb25bc82eb72954209c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateJobObjectA
GetDefaultCommConfigA
_lread
CreateFileA
ReplaceFile
FindFirstVolumeMountPointA
SetConsoleCursorMode
LoadModule
MapViewOfFile
FindNextVolumeA
SetLocaleInfoA
GetCommTimeouts

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE