d450ce80be1e3894253b814bab9ce4032865ba6e8824db767c8dd111fbd5fee5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d450ce80be1e3894253b814bab9ce4032865ba6e8824db767c8dd111fbd5fee5
Size

76KB
MD5

a0ff6978dd32c4f6cff661fdb6c4dc08
SHA1

c41a1142b7f45dde9782778f6cf23e68d3425b1b
SHA256

d450ce80be1e3894253b814bab9ce4032865ba6e8824db767c8dd111fbd5fee5
SHA512

0cc346883f508514eeb755a7991ea8818cd95e772fd5b19d73b515126642761542814927eb015c91d0366b254bb07bcf6077bdb80c97f09d2e6dc43ea679e196
SSDEEP

1536:SkPlQU3/5ydkgfocFN9+rBTA7f+aw8ylBEoq/nbGSHQJ82hW8fPL9:UNIk6p8ylB1qiSHQJ8vYL9

Score

N/A

Malware Config

Signatures

Files

d450ce80be1e3894253b814bab9ce4032865ba6e8824db767c8dd111fbd5fee5
.exe windows x86

e395dcb4b35eb58a9c474e45b6078ec3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileIntA
GetCurrentThreadId
WriteProfileSectionA
GetFullPathNameW
SetDllDirectoryW
GetDefaultCommConfigA
GetConsoleCommandHistoryW
FindClose
OpenThread
DeleteVolumeMountPointA
InitializeSListHead

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE