3491bfade4d1630b0253f17440235e8fa79ffc9acea17ed2edc16ef69e07fbf2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3491bfade4d1630b0253f17440235e8fa79ffc9acea17ed2edc16ef69e07fbf2
Size

132KB
MD5

a0e35ced5e5c866115816cceb0eaeb60
SHA1

5557978f000567c890914d03ed8830b938eccf81
SHA256

3491bfade4d1630b0253f17440235e8fa79ffc9acea17ed2edc16ef69e07fbf2
SHA512

bcaf991428fc5bf1087d30a8f2def39aa5fba122ec13334f9199429975ae173eeeed48611ac21af9cf47f898a8060013d59e8f044c1082411e8315eeeae01673
SSDEEP

3072:qP8a79Ym7z9edz9RuqqJkwVGJqzHCLxe45:ypz+zruqqJkoSqzQV

Score

N/A

Malware Config

Signatures

Files

3491bfade4d1630b0253f17440235e8fa79ffc9acea17ed2edc16ef69e07fbf2
.exe windows x86

ab47fd00d03322554d2c286ee805ffca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetCommandLineA
CreateEventW
VirtualProtectEx
lstrlenA
GetCurrentThread
GetStringTypeW
GetFullPathNameW
VirtualFree
GetModuleFileNameW
SetCurrentDirectoryW
TlsGetValue
WriteConsoleA
GetLocaleInfoW
lstrcpynW
TlsFree
DeleteFileW
FormatMessageA
GetPrivateProfileIntA

wmadmoe

DllCanUnloadNow
DllUnregisterServer
DllRegisterServer
DllGetClassObject

Sections

.text
Size: 13KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.udata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ