dd1682f36223ac567fc295c9ddde1bf4a316cec6d1463e2a32a3052d50fad57a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd1682f36223ac567fc295c9ddde1bf4a316cec6d1463e2a32a3052d50fad57a
Size

92KB
MD5

8bc82822d78f9a01dd0eb10c7b21c626
SHA1

845dc6945dc79a2454baa44879e57b8e2f6b7e24
SHA256

dd1682f36223ac567fc295c9ddde1bf4a316cec6d1463e2a32a3052d50fad57a
SHA512

c54d66b00091717def769fef178d6bec7184ee7f728db70a98b2c2042b343a9ac949ede36d8681b69ce24289059f17a884b5068adef9033aec8f8a55e2042ec0
SSDEEP

1536:K3CFWdErDWz6iyJF4wZJSXUHRAxoZ83YacIyP/69QAq0Gb8/Z5H83oKz:gWWduDjFJFRZJSYRAKKYBbWq0GQP0oKz

Score

N/A

Malware Config

Signatures

Files

dd1682f36223ac567fc295c9ddde1bf4a316cec6d1463e2a32a3052d50fad57a
.exe windows x86

5040d7262f82746aee5fa53024768e6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateVirtualBuffer
IsBadStringPtrA
GetConsoleKeyboardLayoutNameA
GetConsoleAliasesLengthA
SetMessageWaitingIndicator
GetNumberFormatA
GetExpandedNameA
SuspendThread
GetStringTypeExW
GetConsoleInputExeNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE