3215d77a4fc57147945ee90ca4d4b8ad8f82d94d3e81f07454fe4a795a9dd251 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3215d77a4fc57147945ee90ca4d4b8ad8f82d94d3e81f07454fe4a795a9dd251
Size

63KB
MD5

908720de072678dcb4c8d0196da60afc
SHA1

8b51953b2e8c3f0b46f99635efc9de623bef2c11
SHA256

3215d77a4fc57147945ee90ca4d4b8ad8f82d94d3e81f07454fe4a795a9dd251
SHA512

5a2d2e8c7b9c6dcb823e35b25ee659e4731aa74802765480e0c4100310956d0535d2123450983540d4e920c47a25691915d45e9d2dfd37a444e06ddfa2c7e844
SSDEEP

1536:mqHwu2M0BV0xsHEZQexm1RaO/atoXRgzxIV/HJNIbsHK:BHfb+LoagoXRWuV/pNIz

Score

N/A

Malware Config

Signatures

Files

3215d77a4fc57147945ee90ca4d4b8ad8f82d94d3e81f07454fe4a795a9dd251
.exe windows x86

a813bbab0aa0f8007d0ea876ff16fc63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
SetComputerNameA
SetVDMCurrentDirectories
ReadConsoleOutputCharacterW
FindNextVolumeW
MapUserPhysicalPages
QueryWin31IniFilesMappedToRegistry
GlobalGetAtomNameA
GlobalLock
CallNamedPipeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE