3ac6e9c9e3e538d3d0899d84d390d4896b859d10fe2279113fe4d23b7db81982 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ac6e9c9e3e538d3d0899d84d390d4896b859d10fe2279113fe4d23b7db81982
Size

71KB
MD5

a6a4c1879f162ea1d2fe146c0edc9f47
SHA1

0f67ac181fe13a4a65aa221042bbdc4e94709728
SHA256

3ac6e9c9e3e538d3d0899d84d390d4896b859d10fe2279113fe4d23b7db81982
SHA512

fa762852c5d062dffc59a0d277925ce4bf47ddfa4f051adcc553981491510a5b410154ed733fc4bfd16688ef2ff159bf71a4ab0a10a2232a69a375acda45262f
SSDEEP

1536:K0p+RUmlGHw39xdheWYMjATAPQHNUkqRAjVVHpQMEofly6Ojbwt:KSelGe9lYdoGN7A2zXEo9S8t

Score

N/A

Malware Config

Signatures

Files

3ac6e9c9e3e538d3d0899d84d390d4896b859d10fe2279113fe4d23b7db81982
.exe windows x86

cc5125b405bf9476f189d93ac099919e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemCodePagesA
EnumUILanguagesW
FindNextVolumeMountPointW
BuildCommDCBW
GetNumberFormatA
BuildCommDCBAndTimeoutsA
VirtualProtect
CreateEventA
GetConsoleTitleW
IsDBCSLeadByte
DisconnectNamedPipe

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE