af695b206f744ec50bd029fe2186c3ae846581b9080ff9df6661a5fe4c4e4c93 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af695b206f744ec50bd029fe2186c3ae846581b9080ff9df6661a5fe4c4e4c93
Size

775KB
MD5

075aa0459b28589a788efd44e8090d70
SHA1

ba21dfba85452e378bd8c8ba7ccf1bca2d651d09
SHA256

af695b206f744ec50bd029fe2186c3ae846581b9080ff9df6661a5fe4c4e4c93
SHA512

b2fdc504251adef51fb26753347c78fa1196c5481419fbd704ea4ba6a4e229aa93d8999529c6dac3f802a4fe68d6e79e249acb469651f3bbe22f235062deed06
SSDEEP

24576:wmEu3moh1jkMnVZHklW08nfGWoxwwwcjngU:9EuWorVnclW3eWawDcEU

Score

N/A

Malware Config

Signatures

Files

af695b206f744ec50bd029fe2186c3ae846581b9080ff9df6661a5fe4c4e4c93
.exe windows x86

e2ec3aa8938fe4cca387aae254a3d92c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
LoadLibraryA
GetDriveTypeA
VirtualAlloc
ReadConsoleW
WriteConsoleA
CompareStringW
CopyFileA
GetTimeFormatA
GetFileAttributesA
CreateDirectoryA
GetDiskFreeSpaceW
CreateFileMappingA
CopyFileA
GetVolumeInformationA
HeapAlloc
FreeEnvironmentStringsW

msdtcprx

DTC_XaOpen
DTC_XaStart
DTC_XaPrepare
DTC_XaForget

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 756KB - Virtual size: 763KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ