d30c4eeaf3c914ba66dacf71b89d7495ebe9dfd77c9ceff802013e70807c1122 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d30c4eeaf3c914ba66dacf71b89d7495ebe9dfd77c9ceff802013e70807c1122
Size

119KB
MD5

1979fe14d8feac5b5c604f941df3fba8
SHA1

2d21f1d51548eba8ed11eeca54cb29df5ce6c6a6
SHA256

d30c4eeaf3c914ba66dacf71b89d7495ebe9dfd77c9ceff802013e70807c1122
SHA512

a2f46d55723e42744cb7302b44c7bca8e66490d71e12b5686abe9bc98034b363fbddd1a7a0aadb8779c16a70a743a2bda9258942d1dd5b57a94db32bce045e7d
SSDEEP

1536:at+kM9zv+qE2g0W/z+cZc3eEiG/VLmOCp73VSq0pznPbAo7MrfRaExhupD2oI06x:lVWP3JcnUgKwgHs2qxnC

Score

N/A

Malware Config

Signatures

Files

d30c4eeaf3c914ba66dacf71b89d7495ebe9dfd77c9ceff802013e70807c1122
.exe windows x86

a17ffd187bfd2bd708c53da372f86e82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameA
GetCPFileNameFromRegistry
UnregisterConsoleIME
GetWindowsDirectoryA
GetFullPathNameA
WritePrivateProfileSectionA
BaseProcessInitPostImport
GetVolumeInformationW
CloseConsoleHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE