d3d02f5cbc1c09fa877e6cbee299a4c27f3750580aeb69daee57ed11eb9e8cd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3d02f5cbc1c09fa877e6cbee299a4c27f3750580aeb69daee57ed11eb9e8cd1
Size

76KB
MD5

162cfc821a42ecfd8d6ced73524cb2ae
SHA1

e5be513a22004647b41a7dfe9232c2057479e47f
SHA256

d3d02f5cbc1c09fa877e6cbee299a4c27f3750580aeb69daee57ed11eb9e8cd1
SHA512

e930693c29e18ee03c13ae9d5a05edc5bce5ad63b821d6184479811f6c3d58858a637fa48ddecdf78a62301bef7eac1128450127fb7378428783a866a8b6c58c
SSDEEP

1536:Fz1typGAErElM3x+rQJyM+7yfhR+LeD4P3NjEErxTWDTMqhGKYIZTET8x:PoGdrj+r6yM+AhRIkQ9jBkMqhGKZTbx

Score

N/A

Malware Config

Signatures

Files

d3d02f5cbc1c09fa877e6cbee299a4c27f3750580aeb69daee57ed11eb9e8cd1
.exe windows x86

3f7cdb4b8fb03ac0d623be2133106b14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComPlusPackageInstallStatus
NumaVirtualQueryNode
IsBadWritePtr
IsDBCSLeadByte
GetPrivateProfileSectionW
FindFirstVolumeMountPointW
ExpungeConsoleCommandHistoryW
RemoveLocalAlternateComputerNameA
GetTempFileNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE