f820c736f6eab50e193ce72fe57bcc80005ed227b6f7ac7f3f15c9c8a9a14a4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f820c736f6eab50e193ce72fe57bcc80005ed227b6f7ac7f3f15c9c8a9a14a4a
Size

83KB
MD5

6855393eef9357262a40c059c93930c0
SHA1

e77feea49f7dffb467eb57683a89a08939d00a12
SHA256

f820c736f6eab50e193ce72fe57bcc80005ed227b6f7ac7f3f15c9c8a9a14a4a
SHA512

fb1d6aeb40e770f0e38fc33214579e72a072c738153b3131eaa7ddd5d5925e103e61b6aa7ce7ee521ba264074148b9127436419dceb2fb4bf7e42546e0e9d770
SSDEEP

1536:psVbAkoZ9OR/xciEI71MuK7KY/afr4xhLtpl6hp0JKAMvWkpjVrs2ryrd1vUQuqr:pqVoZ9h9IpMT7KY/afGhppOykHs2qmRk

Score

N/A

Malware Config

Signatures

Files

f820c736f6eab50e193ce72fe57bcc80005ed227b6f7ac7f3f15c9c8a9a14a4a
.exe windows x86

032fb1c5e02162ee6d923991608ceec0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointW
RegisterConsoleOS2
MoveFileWithProgressW
IsBadWritePtr
GetLogicalDrives
FoldStringA
CreateConsoleScreenBuffer
SetConsoleMenuClose
DeactivateActCtx
Toolhelp32ReadProcessMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE