3d591944a4e6aebed44bd087f375a8dfa108bf61463ad489ebec322754d518b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d591944a4e6aebed44bd087f375a8dfa108bf61463ad489ebec322754d518b7
Size

320KB
MD5

a3383bcdde87d4cba66c687e973a41d0
SHA1

6d2ffcc141143eabb705c3eb5b859e0f4c915d9a
SHA256

3d591944a4e6aebed44bd087f375a8dfa108bf61463ad489ebec322754d518b7
SHA512

a736377b9c2e30d4a98075c058188e503f5e5bcd87d31f6eb4011f528dfe4cdc103d54e23639f5076e06eb1ae0168d8fb58d9d9000109c7f10eeffec18080704
SSDEEP

6144:8AzqpH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Ah2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

3d591944a4e6aebed44bd087f375a8dfa108bf61463ad489ebec322754d518b7
.exe windows x86

c75c3db4bca4c96c4b7f58e9101459cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DecodeSystemPointer
VDMConsoleOperation
WriteFileGather
CreateProcessInternalWSecure
CreateFiber
GetWindowsDirectoryW
GetAtomNameA
ExitProcess
GetCommProperties
CreateNamedPipeW
GetConsoleCommandHistoryLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE