98ddd53a3b76c5a76fba8e2e9e2c06662c5e244f06aef07e426e43c14cdb9a72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98ddd53a3b76c5a76fba8e2e9e2c06662c5e244f06aef07e426e43c14cdb9a72
Size

57KB
MD5

26021146f3ab289611cd409ce0608680
SHA1

68a4df5139857ab22d79a3d93c653277e4d84b59
SHA256

98ddd53a3b76c5a76fba8e2e9e2c06662c5e244f06aef07e426e43c14cdb9a72
SHA512

9efe10d815554ccc5175bbf01244e068019e64e12fd26b36328db4b3aa6abfc1a8c4e2ebb14e7f859148ea7039d86afdd6393666b4dba5d4a24c412d46426d62
SSDEEP

1536:6JU95Gr9WB0tge9pWTZayNuHxx6VOUVylQ:6eGx+0HxxWZVw

Score

N/A

Malware Config

Signatures

Files

98ddd53a3b76c5a76fba8e2e9e2c06662c5e244f06aef07e426e43c14cdb9a72
.exe windows x86

3d53680c6bf79c19a7f32b97e9509076

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SuspendThread
SetLastError
GetLogicalDriveStringsA
GetModuleHandleA
GetDriveTypeW
CreateNamedPipeA
lstrcmpiA
GetProcessHeap
FileTimeToLocalFileTime
lstrcmpiA
lstrcmpiA
lstrcmpiA
CreateMailslotA
GetVolumePathNameA
WaitForSingleObject
IsValidLocale
GetStdHandle
lstrlenA
GetModuleFileNameA
HeapCreate
lstrcmpiA
Sleep
DeleteFileA

riched20

IID_IRichEditOle
IID_ITextHost
CreateTextServices
RichEditANSIWndProc

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.srt
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ