d6690de9dec178eecfa40648966938206cec83ded74d9b0d6aa9201c403a8277 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6690de9dec178eecfa40648966938206cec83ded74d9b0d6aa9201c403a8277
Size

15KB
MD5

6934b07825f7c99acbe8b7a846652290
SHA1

8652faa04717ad662f8fd38c70dd22915c003f7b
SHA256

d6690de9dec178eecfa40648966938206cec83ded74d9b0d6aa9201c403a8277
SHA512

a6176740b9acab497827d07bca0cede75bcb8093a0175a5e9856e7dc50db8d8e902e4cf9b11db21518a861cc4ad0124b75a3913a80d65d38c2be1fecbdc5b4e0
SSDEEP

384:ioFPBAV07j21kl9dZRn3A+whsrh9cUFI2:LFPB3X21sx31whs19Jt

Score

N/A

Malware Config

Signatures

Files

d6690de9dec178eecfa40648966938206cec83ded74d9b0d6aa9201c403a8277
.dll windows x86

defee39feb6cf70c36be8cd38cf2a663

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LoadLibraryA
GetProcAddress

Exports

Exports

SHGetFolderPathA
UninitializeCom

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 255B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ