000d2ec27fbf7142f70789d8016048534d1d1f4c0d69b37930f6a6b177509192 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000d2ec27fbf7142f70789d8016048534d1d1f4c0d69b37930f6a6b177509192
Size

56KB
MD5

0037308de3ecd93b6c7b972e69dac299
SHA1

bc722e5806f644c96b20d3d3e098978bc4afe958
SHA256

000d2ec27fbf7142f70789d8016048534d1d1f4c0d69b37930f6a6b177509192
SHA512

1d69c49947e9abe3bcb1728b8450927d908696b25ab3d1680824aa8c5afc1488614934ea2e9af78689888ae3df8e8df64eaaf6194d15a5d7934d518024937e79
SSDEEP

1536:JGgxw8+adtiVXF0IXubhL17OO9+jYgO6K8SRa2+:JhqUdtiX0IXuFLYO9+jYS0y

Score

N/A

Malware Config

Signatures

Files

000d2ec27fbf7142f70789d8016048534d1d1f4c0d69b37930f6a6b177509192
.exe windows x86

6b5d09bff97cc6912e2d43642a398496

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameW
CallNamedPipeW
LocalFileTimeToFileTime
GetPrivateProfileSectionNamesA
EscapeCommFunction
Thread32Next
ReadFileEx
GetPrivateProfileSectionNamesW
SetThreadLocale
SetCPGlobal

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE