2d11e07051e6e2f8ce95d7dbea055d14aa18952cae05b1f1db149a2aeb463527 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d11e07051e6e2f8ce95d7dbea055d14aa18952cae05b1f1db149a2aeb463527
Size

18KB
MD5

34ff9e8d388cbd0cae3fbd7f4f45b930
SHA1

e45cc692c4027320aa97d85f214f752e8e90142c
SHA256

2d11e07051e6e2f8ce95d7dbea055d14aa18952cae05b1f1db149a2aeb463527
SHA512

3af66ab3f901576201f5fa2c02521071735413aecd37f916109960f2767eda5678cbd9b857f3e3424453e7df1f876cd18b0f2b46f55f523ac8002d4fc89a201b
SSDEEP

384:L92iRwXscGYERN0lo3PUs/c2yGZVRn+TImehXBHPSjMth:L9DRn7Y80lodNvhXlPcMv

Score

N/A

Malware Config

Signatures

Files

2d11e07051e6e2f8ce95d7dbea055d14aa18952cae05b1f1db149a2aeb463527
.dll windows x86

112fe8db160a6a3928828e24a2df9294

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetFileSize
GetModuleFileNameA
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
Sleep
VirtualAlloc

Exports

Exports

service

Sections

.flat
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE