8dd556d8a5a9965deb8361f9a1759e9730cc8b5ba3d70feb1c87e1aac61824a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dd556d8a5a9965deb8361f9a1759e9730cc8b5ba3d70feb1c87e1aac61824a6
Size

827KB
MD5

b7cf1c23684fc4c5ed0c44d52061298a
SHA1

799013f61927d5b481253b25b5847c65ec45edcf
SHA256

8dd556d8a5a9965deb8361f9a1759e9730cc8b5ba3d70feb1c87e1aac61824a6
SHA512

e2e716c9c501ca95e93d61ee9cf74e79d98148dfc135cd1c72a94cb08831d2ae3f6e03c55060b0e3b6f5e1383d08b7c7f84a723b5d793ea95df793d58a7c6466
SSDEEP

24576:FGH9ZjUXPLaw6NUJg9wGuNB2ZsKgHFhtq:FqZ3NUsujHtq

Score

N/A

Malware Config

Signatures

Files

8dd556d8a5a9965deb8361f9a1759e9730cc8b5ba3d70feb1c87e1aac61824a6
.exe windows x86

ab48127daea8d20de085c1194533b789

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
WriteFile
GetStringTypeA
CreateMailslotW
lstrcmpW
GetCurrentDirectoryA
GetModuleHandleA
GetEnvironmentVariableW
GetLastError
lstrcatA
GetDiskFreeSpaceW
ReadConsoleW
CompareStringW
GetPrivateProfileIntW
HeapFree
GetShortPathNameA
GetVolumeInformationA
GetTimeFormatA
VirtualProtect

dsdmo

DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 804KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ