ddd39295f977eb91dc71f0fb0f4d7f37676658341f7dbcb207ee34231bca10a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddd39295f977eb91dc71f0fb0f4d7f37676658341f7dbcb207ee34231bca10a3
Size

118KB
MD5

80240807e4cf9cc9c405304a2b7120a0
SHA1

c588c8a5359162779a5e998ad3e57bd82a4884d6
SHA256

ddd39295f977eb91dc71f0fb0f4d7f37676658341f7dbcb207ee34231bca10a3
SHA512

48c9834c22598d5a2b051558d29bda6cc78d434e3cda1c85ba599e6aa475dc77b7be37d302f5cbb8dd36227de1f6d0fb9a1251731d55401cf6fcf59e66a29405
SSDEEP

3072:i9k9Egh5t1ShVKnAuj/Kbj/eKKT0KNKfNrgdwn:KkZh5qwAuLKn/e1T0KNK1rW

Score

N/A

Malware Config

Signatures

Files

ddd39295f977eb91dc71f0fb0f4d7f37676658341f7dbcb207ee34231bca10a3
.exe windows x86

72e0e934cb9be2051553559dde682a8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
__setusermatherr
calloc
_controlfp
_exit
_initterm
__p__fmode
_adjust_fdiv
__p__commode
_XcptFilter
__p___initenv
_except_handler3
free
__set_app_type

kernel32

Sleep
GetFullPathNameA
VirtualProtect
CreateProcessA
GetCommandLineW
LocalAlloc
GetModuleHandleW
VirtualProtectEx
GetSystemDirectoryA
GetProcAddress
GetLocaleInfoA
IsBadCodePtr
GetModuleFileNameW
FileTimeToSystemTime
GetVersion
GetProcessHeap
GetLocaleInfoW
OutputDebugStringA
GetDateFormatA
DeleteFileW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ