30d9f794bdecd3131933044e98e0c3bc7c4e864a35954ccbdd08112330fe5596 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30d9f794bdecd3131933044e98e0c3bc7c4e864a35954ccbdd08112330fe5596
Size

1.1MB
MD5

0b701706f45bab4c3fd49a89879bffb1
SHA1

321abcc774b2b21c8d4e6bca95b69d9be3bce8b4
SHA256

30d9f794bdecd3131933044e98e0c3bc7c4e864a35954ccbdd08112330fe5596
SHA512

2c8f778a8502e11f8248f2eed58cf94f5ec3a9c7055a1699d96591a836e7f33fe71faf70a59d0981e70026e76428f35f98acf37e3e42940642af1ce25f36629e
SSDEEP

24576:/f5lUUIIBbDYpNPGIMoh0C1EnufAa7x6AXTzbkvGhLHTE:/BHJ0pHGC1LfAa7xxTEvG5E

Score

N/A

Malware Config

Signatures

Files

30d9f794bdecd3131933044e98e0c3bc7c4e864a35954ccbdd08112330fe5596
.exe windows x86

7c15cadd44e3f594fb538387ff6c8059

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetModuleHandleW
GetCommandLineW
GetUserDefaultLangID
GetLastError
GetCurrentProcessId
GetSystemDefaultLangID
GetSystemDefaultLCID
GetCommandLineA
GetUserDefaultLCID
GetVersion
GetModuleHandleA
GetCurrentProcess
VirtualAlloc
LeaveCriticalSection
GetACP
HeapReAlloc
GetCurrentThreadId
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
FormatMessageA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
LCMapStringA
FreeLibrary
LCMapStringW
LocalAlloc
GetFileType
TerminateProcess
ExitProcess

Sections

.text
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 938B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 784KB - Virtual size: 783KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ