0352981879c6b76280425b153e2648fbac6af31671cd9f69aec5bd648eb087d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0352981879c6b76280425b153e2648fbac6af31671cd9f69aec5bd648eb087d3
Size

76KB
MD5

974c8e304b9a3960913d8b7b13d47492
SHA1

ac1c39a6f9a9080c51f0677afeb37b23315d7907
SHA256

0352981879c6b76280425b153e2648fbac6af31671cd9f69aec5bd648eb087d3
SHA512

1e5b14381aac6bba53325312fe7a7d3adf217aa279c5a09cda37d42fcfbaf7ba671c82d3a994f259a2d832bb35497abdfc0ce105a92ca23ceee9e4ac5d9214a4
SSDEEP

1536:g7dyW+d1SDXqRyCQYKlgYJXRSvL07Nf4mCPClYYaOFpjVrs2ryrd1vUQuq6:4dyW+dEgnZKmYJXRSvL07NqClYdOFHso

Score

N/A

Malware Config

Signatures

Files

0352981879c6b76280425b153e2648fbac6af31671cd9f69aec5bd648eb087d3
.exe windows x86

fcb4d676ba1fc0ec5efa8ff94570ac05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileShortNameW
TlsFree
SwitchToFiber
CallNamedPipeA
InvalidateConsoleDIBits
LZStart
SetThreadLocale
FindVolumeMountPointClose
TransmitCommChar
IsProcessorFeaturePresent
GetProcessId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE