d056db7a5a512e6d0e3299a74184713e153f6ad9374a9ddd3d94d2a3564353fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d056db7a5a512e6d0e3299a74184713e153f6ad9374a9ddd3d94d2a3564353fe
Size

63KB
MD5

d104384a707c900848993d833a5c7cd2
SHA1

8f09052651aeb4bb4f3b955bdfa28a1bf00c9928
SHA256

d056db7a5a512e6d0e3299a74184713e153f6ad9374a9ddd3d94d2a3564353fe
SHA512

3b35a025f5dfa7277d36d8b1c1ce28c2a097d17b6deb4b37d2a2efd3ab72cf3662ab223b15378ef0964d08896ae11ea9f1d1110b30f7972db70499a6e6723f76
SSDEEP

1536:jZEVnIQrubsANVeHugmMevhSg+N6hM4DPtSvq06leBq1:j+habseendT6uQUSoB4

Score

N/A

Malware Config

Signatures

Files

d056db7a5a512e6d0e3299a74184713e153f6ad9374a9ddd3d94d2a3564353fe
.exe windows x86

14447abcf9ff295c6f8517065ed8b771

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileSectionW
RemoveDirectoryW
CreateDirectoryA
CancelIo
FindCloseChangeNotification
DeleteFiber
CopyFileW
SetConsoleCommandHistoryMode
Toolhelp32ReadProcessMemory
DeleteTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE