3b9cc0ef4a3ddba81f6c806cd2663f70019925db003c4c7c0c98981dc797a4d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b9cc0ef4a3ddba81f6c806cd2663f70019925db003c4c7c0c98981dc797a4d4
Size

61KB
MD5

0f369eb6ee6d6999208f73142a00034b
SHA1

a4e4c3ff029b81a578f5e05e7e85040b46ae7ad9
SHA256

3b9cc0ef4a3ddba81f6c806cd2663f70019925db003c4c7c0c98981dc797a4d4
SHA512

970d33c24a10b9c9ce79cba897c1498104e83d7d85ee5beb096cc93bda8b818a253b87c76cc975577589615a60a96d911a8d232cc983662e009807091d5cbfde
SSDEEP

1536:c+ZFO1HJmERHgJMzrfcyHKpFUKacdL7ZvV7DlTNh53borg:mNJmywMzrlKpeKJL7ZtlBT3boc

Score

N/A

Malware Config

Signatures

Files

3b9cc0ef4a3ddba81f6c806cd2663f70019925db003c4c7c0c98981dc797a4d4
.exe windows x86

854ee2ba9cf0bf69fa6bf0f0c96e2201

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasW
IsBadWritePtr
CancelDeviceWakeupRequest
GetLogicalDriveStringsW
CreateDirectoryExA
SearchPathA
GetProfileSectionA
WriteConsoleA
lstrcpyn
SetCommMask
GetNumaProcessorNode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE