35c2cc1486bb465132d8aa48f379913c254850d857db89703f3773fd002b1bd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35c2cc1486bb465132d8aa48f379913c254850d857db89703f3773fd002b1bd4
Size

56KB
MD5

46b1fefbc67997b35a10dc44ac110120
SHA1

3d2603bafc926b3e596faefe693eed1a0dd38611
SHA256

35c2cc1486bb465132d8aa48f379913c254850d857db89703f3773fd002b1bd4
SHA512

4ea32743197e8065710b05ed54666f528534bfae3600d8a1c5dd46d609dce1cbcc4827c2884ee5e949ab5af1096f0dfea36e29d2fee9e2bc163e8c4bbbd52428
SSDEEP

1536:xd/fovbdj9tS8rz9QDGOLFvYgvam3hkCgBNC1rR8kSb5:3QRj9tp9QDzmgvPxXdRab5

Score

N/A

Malware Config

Signatures

Files

35c2cc1486bb465132d8aa48f379913c254850d857db89703f3773fd002b1bd4
.exe windows x86

d5b93d7214939a7fdde07b3268593abf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerW
RegisterWowBaseHandlers
RestoreLastError
lstrcatA
GetProfileIntW
GetEnvironmentVariableA
GlobalMemoryStatus
PrivCopyFileExW
GetStdHandle
HeapSize
CreateEventW
MapUserPhysicalPages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE