3ee01e7d2e0d8bbe44f817bff2fcb34f91db9dbb2ac0a406337ce01746be3e0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ee01e7d2e0d8bbe44f817bff2fcb34f91db9dbb2ac0a406337ce01746be3e0a
Size

320KB
MD5

a023acc9f65feb0732608ed333cf9660
SHA1

dcc21fe02bb9a4ab2865883cfe133a4789d49ee5
SHA256

3ee01e7d2e0d8bbe44f817bff2fcb34f91db9dbb2ac0a406337ce01746be3e0a
SHA512

a652466d447cbc91b6fc1c5e668374a1a2fcafd4a8444438152038055583bebb45e07e76f73d921a8dfc625a656a0ff0feed0c0710a59c83dabea9ff4ffc4519
SSDEEP

6144:yt9zShAHH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:yX2hI2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

3ee01e7d2e0d8bbe44f817bff2fcb34f91db9dbb2ac0a406337ce01746be3e0a
.exe windows x86

4da411611d68e530d595304933925b5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchangeAdd
MoveFileW
TermsrvAppInstallMode
GetConsoleCommandHistoryLengthA
FatalAppExitW
CreateMutexW
EnumDateFormatsA
EnumDateFormatsExW
FindFirstChangeNotificationW
InterlockedPopEntrySList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE