d8274459caa184468dbcc780e6da562c2d2f7d5d3c26c091317f3e85d8670222 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8274459caa184468dbcc780e6da562c2d2f7d5d3c26c091317f3e85d8670222
Size

817KB
MD5

bf79e30ab2cc18a82b73268df1cc6786
SHA1

2d29dbc88ab5d7babc39b05b272471cda0f45c93
SHA256

d8274459caa184468dbcc780e6da562c2d2f7d5d3c26c091317f3e85d8670222
SHA512

df0e6e09f9fa300690686a433198dd439c344281b5390ecb1591567eb22e353af61eb5118fc280d1d632d3573f72696a545636a535a69071d853a929a13fff45
SSDEEP

12288:iO2jzfoBTeacrIEpPh3f8unJwz8X9ZmkCdyeNxPGMfRq8GnDw7NzaGS0YkR:ityTLcrF38uJw2ZIzNRJqxDw7NauYkR

Score

N/A

Malware Config

Signatures

Files

d8274459caa184468dbcc780e6da562c2d2f7d5d3c26c091317f3e85d8670222
.exe windows x86

d002d326619e5df37ccab81b20382128

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

TlsFree
SetCurrentDirectoryW
GetFullPathNameW
VirtualFree
GetCurrentThread
FormatMessageA
GetLocaleInfoW
GetCommandLineA
lstrlenA
lstrcpynW
GetModuleFileNameW
WriteConsoleA
VirtualProtectEx
GetModuleHandleA
TlsGetValue
GetStringTypeW
CreateEventW
GetPrivateProfileIntA
DeleteFileW

wmadmoe

DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer

Sections

.text
Size: 13KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.udata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ