cdef376d413b7b9b9a78bcf6104b04dc7585534ebd05c1c28bc4437c3a357079 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdef376d413b7b9b9a78bcf6104b04dc7585534ebd05c1c28bc4437c3a357079
Size

63KB
MD5

b6d29a55d09e3f429b391b4dd3eb8786
SHA1

56c4be3a4f7023fb14beeb0af61510e8994dcb36
SHA256

cdef376d413b7b9b9a78bcf6104b04dc7585534ebd05c1c28bc4437c3a357079
SHA512

e3b6ac8c4ec7a5d627567175b624051c741649c4dc8754a15eccf223d2ca2249a58732e16ef034123598c0ac55194afba6350ec6e20df52eb60ae25383d99d03
SSDEEP

1536:UL2IjdREXjaM0hK4ijqwolDSxAIwyQtiNtl8mobeaXdWcJPwBF:UvETaMx4iuwCDSNxQtIr8mobe5j

Score

N/A

Malware Config

Signatures

Files

cdef376d413b7b9b9a78bcf6104b04dc7585534ebd05c1c28bc4437c3a357079
.exe windows x86

af1edd78b0f0609c4efcc04440256ab3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
QueryPerformanceFrequency
_llseek
SetConsoleCursorPosition
ExpandEnvironmentStringsW
CreateMailslotW
LCMapStringW
GetProfileIntA
SwitchToThread
AreFileApisANSI
IsWow64Process

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE