dde68bc9ca82c9c2aadfddf8ae23884f3a589e3eabbb6221be653619201c0b37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dde68bc9ca82c9c2aadfddf8ae23884f3a589e3eabbb6221be653619201c0b37
Size

299KB
MD5

e2564617a7dbcecca6bddcdca95362a4
SHA1

7799d7d2fb09e63052f16c6f886bbd1b011e352d
SHA256

dde68bc9ca82c9c2aadfddf8ae23884f3a589e3eabbb6221be653619201c0b37
SHA512

56b0700b32c541457752e3fcf84198fac00eeb554523f49ff96adbb502b3d96caa946372060d16f1eb1a083459aad6819607924fcc51366b3aa621ab03d4e19c
SSDEEP

6144:4zE1d4q15xOMpimD52mQnakc6uWKf0wNq5mFEazxHCaKdawog6V:40425kMpimDQ4mAf0wNq5mFltCaKdapg

Score

N/A

Malware Config

Signatures

Files

dde68bc9ca82c9c2aadfddf8ae23884f3a589e3eabbb6221be653619201c0b37
.exe windows x86

b564964997ce5f81145637334b9d9bb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetCurrentThreadId
GetVersion
GetCommandLineA
GetCurrentProcessId
GetCurrentThread
GetLastError
GetTickCount
GetModuleHandleA
ExitProcess
HeapAlloc
GetProcessHeap
GetStartupInfoA

msvcrt

_XcptFilter
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
_strcmpi

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

giyeykg
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

aeowkq
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

suumc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE