2329462b6588bffd847f7c73cc345898166c6df45323b23cdea000a3c721f0bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2329462b6588bffd847f7c73cc345898166c6df45323b23cdea000a3c721f0bf
Size

827KB
MD5

dd06dc26be3f90f293b9adb793eef4bc
SHA1

4f6076ecc9a57aeb9568744484746d24dbbdc28b
SHA256

2329462b6588bffd847f7c73cc345898166c6df45323b23cdea000a3c721f0bf
SHA512

5c521669cdd050b1d29db25766b1ab777bb58375d2fd7b16cc7524f175045dbd1fea155a411370c4e25bbd30e2798371b261b9bca57d9e752bec8a1d87d4c2a5
SSDEEP

24576:3GH9ZjUXPLaw6NUJg9wGuNB2ZsKgHFhtq:3qZ3NUsujHtq

Score

N/A

Malware Config

Signatures

Files

2329462b6588bffd847f7c73cc345898166c6df45323b23cdea000a3c721f0bf
.exe windows x86

d699bb965e52bf8b52ae1d0666eade91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringW
WriteFile
GetPrivateProfileIntW
GetEnvironmentVariableW
GetStringTypeA
HeapFree
CreateMailslotW
GetModuleHandleA
GetVolumeInformationA
GetLastError
lstrcmpW
GetTimeFormatA
GetShortPathNameA
GetDiskFreeSpaceW
VirtualProtect
GetCurrentDirectoryA
ReadConsoleW
lstrcatA
GetProcessHeap

dsdmo

DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 804KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ