d834d3ad886f16b66a5c8cd5ff3180314bed29fc7062cedde355be42310f5518 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d834d3ad886f16b66a5c8cd5ff3180314bed29fc7062cedde355be42310f5518
Size

63KB
MD5

82655173c3b4d3ff7e8319f246245f20
SHA1

e1e551588bfefd2dff009db7c8d9b615744c1616
SHA256

d834d3ad886f16b66a5c8cd5ff3180314bed29fc7062cedde355be42310f5518
SHA512

2fcaad98abbbe0d272fb5c7c9d878744da8674627592ae47d5c297d17c74a9d7afe28ba072dd21c9c8806d0ebfd6b085d1a3fac98b69941d1a09224d2624b533
SSDEEP

1536:cqCsmXURjg156K4B7YaQWc/vgf3NdvdUa+FVv1zBP+vgLNloS:WnQu6Z9Bi/4FdvdGFdP+2Nb

Score

N/A

Malware Config

Signatures

Files

d834d3ad886f16b66a5c8cd5ff3180314bed29fc7062cedde355be42310f5518
.exe windows x86

b2675bd47a9a205e44fe8dda32afac8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmp
ExtendVirtualBuffer
GetNumaProcessorNode
LocalLock
FindNextFileW
FileTimeToLocalFileTime
GetNamedPipeHandleStateW
SetFileAttributesA
WriteConsoleOutputCharacterW
SetDllDirectoryW
DeleteFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE