d2dc79cf1cafa61b59d35f7363684ff8d69bd6453c082522629dbf6d8fc182b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2dc79cf1cafa61b59d35f7363684ff8d69bd6453c082522629dbf6d8fc182b6
Size

56KB
MD5

e4b7ebcd11f8901be8e00b8ba7b4b6ed
SHA1

11fc8667064d31980eca4c6dc3f9f4a1758c7db5
SHA256

d2dc79cf1cafa61b59d35f7363684ff8d69bd6453c082522629dbf6d8fc182b6
SHA512

5c90f833a65ed216d8321cafb2fddc29a0facaa93f31f044f81fc45f354c5a6aec7fc24d83bb5a66f0dc853b5c877265a7b845c8693c3c71891fdd072be4f5ec
SSDEEP

1536:tkgOt7LyD4X3RPvOevDxuXg5I0hHh83ueUC13+90ZCThcI:tkgOt7LykRPmAv5I6S3uex4TqI

Score

N/A

Malware Config

Signatures

Files

d2dc79cf1cafa61b59d35f7363684ff8d69bd6453c082522629dbf6d8fc182b6
.exe windows x86

32f3ec614d240c009455d194a4f1bea5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
lstrcpyA
WritePrivateProfileStringW
OpenEventW
GetSystemDirectoryW
Heap32Next
DelayLoadFailureHook
GetNumaProcessorMap
LCMapStringW
FindFirstVolumeMountPointA
QueryPerformanceFrequency

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE