d04820a7f7fb32d567f78d27bcc5eca539bf0e814e981d1d100b21677761de59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d04820a7f7fb32d567f78d27bcc5eca539bf0e814e981d1d100b21677761de59
Size

180KB
MD5

3355f30ee91f328942f9cd18afdbf2b0
SHA1

b68c7300ac9a0eb57ae51842fa44b67f0909504c
SHA256

d04820a7f7fb32d567f78d27bcc5eca539bf0e814e981d1d100b21677761de59
SHA512

9890866ca68c96279df41e5f530bfb848286a04398f2c20a31ab5bd1e0b71de4e7488b6b2950d78fdcdd0a23c38d39e56d345f3d1cb21dfd24312ad20e72d16e
SSDEEP

3072:MwtqS+Hi8+AtUglS8SO/ED6Zx/rDmU0kFdF3tFK5P:MlcPAt3lAO/Fp6kV3ji

Score

N/A

Malware Config

Signatures

Files

d04820a7f7fb32d567f78d27bcc5eca539bf0e814e981d1d100b21677761de59
.exe windows x86

eff4619e7479a35241c468c6e366d51b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlen
CreateProcessA
GetNamedPipeInfo
IsBadHugeWritePtr
GetNumaAvailableMemoryNode
CopyFileA
OpenJobObjectW
FindFirstVolumeA
WritePrivateProfileStructA
WriteConsoleInputVDMW
WaitForMultipleObjectsEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 165KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE