dd2d9b689c6ef20b01268f8db6ef782e0e2b174bebe98586634c9942dcc44b7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd2d9b689c6ef20b01268f8db6ef782e0e2b174bebe98586634c9942dcc44b7d
Size

144KB
MD5

7212c7683e63074ed469cf6da53302e0
SHA1

02267f5432b9c2705ab0c4895dfafd5622842460
SHA256

dd2d9b689c6ef20b01268f8db6ef782e0e2b174bebe98586634c9942dcc44b7d
SHA512

8bc28e5fd37714f6d70e0dca4b9b44720596408fa96cbc86cc7d031b6b49ab92e5570d32dd3f6d36653ad31131cc4ef109b1e43136c2eed33e9821fdd81261f1
SSDEEP

3072:tbaTfXXeXJojtL8Hs2qmRlixXaKa0qMW2pVol3IFEyKwLR:tbmXe3/wguJpVopIh

Score

N/A

Malware Config

Signatures

Files

dd2d9b689c6ef20b01268f8db6ef782e0e2b174bebe98586634c9942dcc44b7d
.exe windows x86

3cfe1016033c101bcf2db17865cb7b57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Module32FirstW
GetProcessIoCounters
LZStart
Thread32Next
CopyLZFile
GetVolumeInformationA
ExitThread
GetCPInfo
GlobalReAlloc
GetProcessVersion
DuplicateConsoleHandle
DeleteFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE