4dd03afe348db8f7456e696361bbd7ee5082f4ebb23937279f1828a138fc92c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dd03afe348db8f7456e696361bbd7ee5082f4ebb23937279f1828a138fc92c3
Size

320KB
MD5

a1a6f68633f40056a73334a409f22100
SHA1

7f503caeff1cfbed91b0b4bcaff98c1358875847
SHA256

4dd03afe348db8f7456e696361bbd7ee5082f4ebb23937279f1828a138fc92c3
SHA512

a607d64a0c03072cbdb8ab2656da66d1206ea6030a3283492e795b20ff7310b04a67de31ae100e73fd24ff156f9d81abaa4008dacd9bb3aeb5de4f2f3cda1f7b
SSDEEP

6144:8/SivE3H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:oEX2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

4dd03afe348db8f7456e696361bbd7ee5082f4ebb23937279f1828a138fc92c3
.exe windows x86

0531b2f7dd527736b53eb7d5022fcd17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
GetProcessId
DefineDosDeviceA
OpenJobObjectA
BaseCleanupAppcompatCacheSupport
_llseek
VerLanguageNameA
AreFileApisANSI
BuildCommDCBW
SizeofResource
QueryPerformanceFrequency

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE