cd43ce4e223263893b8f61a9c0a4c4679f94f2d6ab72fbf1c3c3e6fdc24e8425 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd43ce4e223263893b8f61a9c0a4c4679f94f2d6ab72fbf1c3c3e6fdc24e8425
Size

56KB
MD5

28a880fc8e59e696e3d83d365594c6d0
SHA1

9bf9fdab1cc0642fb0537df712bc606823a940f9
SHA256

cd43ce4e223263893b8f61a9c0a4c4679f94f2d6ab72fbf1c3c3e6fdc24e8425
SHA512

f416d4574af0115d99f15ba2a8c6a2e877707ff6089e115ee69360b7452d080f9d18ad43fc7c6db452219db018b87d96b26e2e5f7a45c7940ab491ac6ac7caaf
SSDEEP

1536:r86OWGbZ4fNKAsM0fefqnIST3YE8K6x7Vdd:4tWmMZVfqLL96xB

Score

N/A

Malware Config

Signatures

Files

cd43ce4e223263893b8f61a9c0a4c4679f94f2d6ab72fbf1c3c3e6fdc24e8425
.exe windows x86

ec3532fed23a26a31d552b266f6e595d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDefaultCommConfigA
ExpandEnvironmentStringsA
MapUserPhysicalPages
GetFirmwareEnvironmentVariableW
GetVolumePathNameA
RtlMoveMemory
GetDateFormatA
ReadConsoleW
GetUserDefaultUILanguage
GetProcessVersion

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE