d4135abf4ecced7352f504c9d7b3af59772346428db26c43f3f80c9d3ea38597 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4135abf4ecced7352f504c9d7b3af59772346428db26c43f3f80c9d3ea38597
Size

352KB
MD5

14a196228055062895893bcb4467445d
SHA1

090b728c86d458e619520cd6d6d13a17de789d56
SHA256

d4135abf4ecced7352f504c9d7b3af59772346428db26c43f3f80c9d3ea38597
SHA512

b6f6caccfb7345c72fc183bc6cdf88e2b26dc4f03ab20dff9f3a3ab065ebfd99d11dc05d606211f20f9426b2458261176cbea5840a47daed3d805336f94e1ce0
SSDEEP

6144:MLquF2YYzXSpwRCKPtQsS+xSjRhB8IiaAD1wGNtKn/tinzu3rnkw4kFp:iqKLYzioCrP5h8Iiv1ttWl+0kwZp

Score

N/A

Malware Config

Signatures

Files

d4135abf4ecced7352f504c9d7b3af59772346428db26c43f3f80c9d3ea38597
.exe windows x86

f9d8e548848f7dbd5370ae65ac05c9f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memcpy
memcmp

kernel32

GetProcAddress
GetUserDefaultLCID
GlobalAlloc
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
CreateFileA
GetEnvironmentVariableA
IsSystemResumeAutomatic

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ