a3452805175793a772158d0e285d8d3df49eabddedfd866fbe6623ca19435ac0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3452805175793a772158d0e285d8d3df49eabddedfd866fbe6623ca19435ac0
Size

56KB
MD5

4503e920acf51394ff2ff34d2a21aa6b
SHA1

37e7d335d3d3365affdec4141dd3e072382d8355
SHA256

a3452805175793a772158d0e285d8d3df49eabddedfd866fbe6623ca19435ac0
SHA512

5a9cfc341cca49af3ad3335bb84b178af58d94a26436ae36b8c92dc7051d67547258f10c922575235b63fecfb10ca8ab980b1d247e48c17c7afd5495ef8e7f12
SSDEEP

1536:XRZnZo3bH7DGXnBe7HKFUurXalDawlSmtXiwqbDY1+:BumX8G7rqlVIm0wqbb

Score

N/A

Malware Config

Signatures

Files

a3452805175793a772158d0e285d8d3df49eabddedfd866fbe6623ca19435ac0
.exe windows x86

9055fed17d9762806df8f697607a7e2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushViewOfFile
CreateDirectoryA
GlobalAlloc
QueryDepthSList
BackupRead
BuildCommDCBW
GetNamedPipeHandleStateW
AssignProcessToJobObject
GetDiskFreeSpaceExA
SetProcessWorkingSetSize
InterlockedIncrement

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE