349f8795795f97dbfd5337748b1a5e50dedb449d0204530ec15204bb9cec57a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

349f8795795f97dbfd5337748b1a5e50dedb449d0204530ec15204bb9cec57a0
Size

76KB
MD5

b35900340930fe5e4e59faeed74c4583
SHA1

6d47e2c7f2c77b7713e4e7e80fc707131f1e4555
SHA256

349f8795795f97dbfd5337748b1a5e50dedb449d0204530ec15204bb9cec57a0
SHA512

36c88f4dabbbacc8fc43aab984cf33a4341a5ca316e6966ff81f09ee4ff4f5835f7b7cf86ad115fc9790b7aca8b5a4d5b0d03b607c07c0caf5635bf336974cff
SSDEEP

1536:26kS9nN3pf3SKwsgFLw3qkYdvjWmlpjVrs2ryrd1vUQuq6:2fYvPpFgFEYdRlHs2qo

Score

N/A

Malware Config

Signatures

Files

349f8795795f97dbfd5337748b1a5e50dedb449d0204530ec15204bb9cec57a0
.exe windows x86

7c113026073af30061f814bf945697b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_hread
ConvertFiberToThread
QueryDosDeviceW
FindNextVolumeW
LockFile
IsDBCSLeadByte
CreateNamedPipeW
DeleteVolumeMountPointA
SetFileTime
Heap32Next
lstrcpyA
GetNumaNodeProcessorMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE