747efbfcc57ca29f0df7fad1fabf44b178ebfb696e27b673e45d1dcd6de46fa6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

747efbfcc57ca29f0df7fad1fabf44b178ebfb696e27b673e45d1dcd6de46fa6
Size

94KB
MD5

05ecf16d818cd07f2f49c183e8e612e0
SHA1

2f273552b35099703315f384868e89a4e3dbfac5
SHA256

747efbfcc57ca29f0df7fad1fabf44b178ebfb696e27b673e45d1dcd6de46fa6
SHA512

a08a95562db0431c7d6ce0fb393ab1fec747e5513cd46e7764f9242134638605c042042782e0f0cedf296eb28947fa748206878213d62449846f5e05af11202b
SSDEEP

1536:QyOsGFHurg9vg7Y7CXHFQCqKQLfSifOauBbZs7LzGbwaNc8YaEJwZK4/83ZoMOAf:QFJFHurg9vC88HF3Q5f8BO7IwaNhZEXx

Score

N/A

Malware Config

Signatures

Files

747efbfcc57ca29f0df7fad1fabf44b178ebfb696e27b673e45d1dcd6de46fa6
.exe windows x86

e3b9caf2c0411555755b7184b3dba2fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenWaitableTimerA
SetThreadContext
CreateIoCompletionPort
GetProfileStringA
FindFirstVolumeW
GetTempPathW
DeleteVolumeMountPointW
lstrcmpA
SetConsoleMode
FindNextVolumeMountPointA
FindNextVolumeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE