346bd375cc910b52490246a4d44b3dc49e4bd23a85d6c7544f7a54bb469e0066 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

346bd375cc910b52490246a4d44b3dc49e4bd23a85d6c7544f7a54bb469e0066
Size

495KB
MD5

5f011e63c07e350c71b3b2a3f0592cd0
SHA1

8e70915d790c99a2c451522a173288086e4ba5d5
SHA256

346bd375cc910b52490246a4d44b3dc49e4bd23a85d6c7544f7a54bb469e0066
SHA512

53b414f51525dc7dc1186b3c8ef3597155e2a2c35b9a3222ed4bb9d066e6fefa8f108910865f2d6e3fa85cdc549b94025a2698ad4a8aa16ee3a415f13806559b
SSDEEP

12288:21WIU4UzpDJLbArJuEz+Wj9aiMmvXLYLbZyz:2Az2daN7Y7+4

Score

N/A

Malware Config

Signatures

Files

346bd375cc910b52490246a4d44b3dc49e4bd23a85d6c7544f7a54bb469e0066
.exe windows x86

6ed462155e1b1eef34ef721afffa52b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
FileTimeToLocalFileTime
lstrcmpiA
lstrcmpiA
GetBinaryTypeA
GetModuleHandleA
IsValidCodePage
GetPrivateProfileStringA
lstrcmpiA
GetLogicalDrives
CreateWaitableTimerW
GetExitCodeProcess
lstrcmpiA
EndUpdateResourceA
TlsFree
GetLocalTime
lstrcatW
CreateNamedPipeA
SetLastError
lstrcmpiA
HeapCreate
GetDriveTypeA
GetTickCount

ntmarta

EventNameFree
AccFreeIndexArray
AccConvertAccessToSD
EventGuidToName

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 488KB - Virtual size: 1008KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ