dac6ccecd37b78141cc8943110d98b447966cc44e825b714b0bf9d6e14d492d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dac6ccecd37b78141cc8943110d98b447966cc44e825b714b0bf9d6e14d492d6
Size

28KB
MD5

b4475919586c54406517a9a9b7a10bc2
SHA1

cf558b1a3b6bad79efafca1f5533a17e96ff4181
SHA256

dac6ccecd37b78141cc8943110d98b447966cc44e825b714b0bf9d6e14d492d6
SHA512

634874c203591059ff17867688b443be7f2cce8a7b61139da16eebfc43cee84111877eec2cce751d149b62ec381a77f7b2f9d7626d41a6f528ff3135d2325472
SSDEEP

384:ZJabpLTfEeSgcGzHnvc9514aDkpmlWtlcfa/y3EhTruAWokFRF:ZQbx8eOGzHkn14ykzlx/53uVosR

Score

N/A

Malware Config

Signatures

Files

dac6ccecd37b78141cc8943110d98b447966cc44e825b714b0bf9d6e14d492d6
.exe windows x86

da0b374361f448c38bdb521e186efcdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcStringBindingComposeA
RpcBindingFree
RpcBindingFromStringBindingA
RpcStringFreeA

rpcns4

RpcNsBindingImportBeginA

kernel32

HeapCreate
VirtualFree
CloseHandle
SetStdHandle
GetStringTypeA
LCMapStringW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
VirtualAlloc
GetStringTypeW
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
GetLastError
HeapReAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE