346ed5b8fb5e8386498f8608931bdac0c408d544bba7434cdff7eebdb0ddb42d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

346ed5b8fb5e8386498f8608931bdac0c408d544bba7434cdff7eebdb0ddb42d
Size

56KB
MD5

ed24410b60d060c3608daf61da227488
SHA1

27bad641144da62987bf15ce2fd7e80376f5fe4b
SHA256

346ed5b8fb5e8386498f8608931bdac0c408d544bba7434cdff7eebdb0ddb42d
SHA512

1e14019fcac80020c5037ed92e3e72823d6bca2921d567a95c1f7c606b1b9141c0490d74c857eeddcd4689709f0c53670db18857a9c57bd5fa7f83358fbd6a2e
SSDEEP

1536:TLLLLs+8oH7nDZCK6AsMOzEG85I/FJO1lnlVBIa0mUpQcIw:o07DZ1V68q/bSpX0RV

Score

N/A

Malware Config

Signatures

Files

346ed5b8fb5e8386498f8608931bdac0c408d544bba7434cdff7eebdb0ddb42d
.exe windows x86

a9ef097324c426d91246d745c75ef304

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
WritePrivateProfileStringA
FatalAppExitW
CreateFileMappingA
IsDBCSLeadByteEx
GetConsoleHardwareState
GetVolumeInformationA
GetCurrentProcessId
LZInit
WaitCommEvent
CancelTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE