ddaa3dfa9006842417d191639c9bc9aae0c4cd22ab84a100e46ba7f51946a640 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddaa3dfa9006842417d191639c9bc9aae0c4cd22ab84a100e46ba7f51946a640
Size

923KB
MD5

925a150436479513aa6a51ef6a39e583
SHA1

0438bc790197fa9bc0dbff7c7adb6e1387404369
SHA256

ddaa3dfa9006842417d191639c9bc9aae0c4cd22ab84a100e46ba7f51946a640
SHA512

74e40aa3917ef999b5ac57e61bfdfaaf009785b916fc68dde29befdaf3fa13ebfe1be062162cf5d1af472e101b6a532f88a9dc830614d93bc451fffdd11156a1
SSDEEP

24576:n7abJkS1S6qy18sQBX6c+5vP5UCben8xu:7fS1b7Cw3bCn

Score

N/A

Malware Config

Signatures

Files

ddaa3dfa9006842417d191639c9bc9aae0c4cd22ab84a100e46ba7f51946a640
.exe windows x86

5a09fa16fe73edaf05dc213d4ecf50d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
QueryPerformanceCounter
Sleep
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE