40ddba04524e7b1992b3c1e81e38cabd9460c39de6e234714c95359635cc4cb2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40ddba04524e7b1992b3c1e81e38cabd9460c39de6e234714c95359635cc4cb2
Size

111KB
MD5

592999688065d1c4192efe7b2bb5847f
SHA1

baa89e52d0609d75bb378e8f33cd485b8e58ffdd
SHA256

40ddba04524e7b1992b3c1e81e38cabd9460c39de6e234714c95359635cc4cb2
SHA512

b9926c74336ab66facf30ccfde53a956db9b512cb281e16177f23841742caeea9c39654b1c4684d6d218bada53e81152e2f38abe01cf7047d12387a1c11e5b70
SSDEEP

3072:g9fSx8y85gTB8Jkmmqpe+F0ILZQMNX9FvTdZmuEnX:g9fSmyMg+zmqpeMZQy9F7dZmL

Score

N/A

Malware Config

Signatures

Files

40ddba04524e7b1992b3c1e81e38cabd9460c39de6e234714c95359635cc4cb2
.exe windows x86

77a5622cb45943db16654a1d894368f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedPushEntrySList
CreateFiberEx
GetConsoleAliasExesW
CallNamedPipeW
SystemTimeToTzSpecificLocalTime
GetProcessHeap
CallNamedPipeA
GetLogicalProcessorInformation
GetStartupInfoW
MapViewOfFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 97KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cduupqo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE