da3b0d4491a3fc5052b3a92d4525a002ed6bc51a5d0b9b7d75fa62a23b646690 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da3b0d4491a3fc5052b3a92d4525a002ed6bc51a5d0b9b7d75fa62a23b646690
Size

56KB
MD5

0380434f11b61bb6e4c154ae37873b7f
SHA1

620a27c0892a90bd7f186c549502d2e53a1910ee
SHA256

da3b0d4491a3fc5052b3a92d4525a002ed6bc51a5d0b9b7d75fa62a23b646690
SHA512

17c266ad3e953fb1c34198581dd23f7ceca856001dff170eca35b4012010fa63d00c363e688c4a3c7fe9d35aad5ded4c38a76aa6f220cb09a5618e443fa23c87
SSDEEP

768:o01eCEUymS203Z3KUsngA+NM+53PYI4jMOA0QKiC/FjFpcLKrMRZe8p8rK6Y/qF1:oDx3XrSjMyzdRS2rybjZ/QewifLcHWPQ

Score

N/A

Malware Config

Signatures

Files

da3b0d4491a3fc5052b3a92d4525a002ed6bc51a5d0b9b7d75fa62a23b646690
.exe windows x86

be1599c11091d10e24f25c7415f06a83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
QueryInformationJobObject
SetComputerNameA
GetPrivateProfileStringA
RtlCaptureContext
DeleteVolumeMountPointW
DnsHostnameToComputerNameA
FreeLibrary
CreateMutexA
VirtualAlloc
DnsHostnameToComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE