dd1d9693abefe7933b30a3b33fa891643df01d69581bbf9f491167cf283940e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd1d9693abefe7933b30a3b33fa891643df01d69581bbf9f491167cf283940e2
Size

83KB
MD5

0d6aee3ace1a8f64afed63a3ef380139
SHA1

06645a406af7a0edc959ff2e616aa9da6caff278
SHA256

dd1d9693abefe7933b30a3b33fa891643df01d69581bbf9f491167cf283940e2
SHA512

2e8c7fc5e766dcb1845a9d37cc375f2c3d618abe5e42766fae2c3bd6cef7002638c90dc42a9a17798ff0d4c8489834b307c8fe928f6e90638ab21d19ce2829c0
SSDEEP

1536:GZ6sciMYiM5J0360MFF6Kc2HLUn8GBEN2Y9uLEtanmZcaIwaKLZ8:5sbrz0Mbp7ETKj9Zt3caQX

Score

N/A

Malware Config

Signatures

Files

dd1d9693abefe7933b30a3b33fa891643df01d69581bbf9f491167cf283940e2
.exe windows x86

88069798460793f2cf94c89b973cff15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleA
VirtualProtectEx
IsBadReadPtr
GetModuleHandleW
GetProcAddress
DeleteFileA
GetProcessHeap
SetEnvironmentVariableA
LCMapStringW
lstrlenW
VirtualProtect
GetCommandLineW
GetOEMCP
GetConsoleMode
GetWindowsDirectoryA

msvcrt

_adjust_fdiv
__p___initenv
__p__commode
__getmainargs
_exit
_initterm
free
_controlfp
_except_handler3
__p__fmode
calloc
_XcptFilter
__setusermatherr
__set_app_type

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ