7e0ff763c3c04c45e0aaf40e1508d16e49ecf5c195a1e7b5c6d601538e188426 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e0ff763c3c04c45e0aaf40e1508d16e49ecf5c195a1e7b5c6d601538e188426
Size

56KB
MD5

6c70464651b34121267f3690e1bedee0
SHA1

28d9e72830529aef967ea0c8a26c05716c9a24f5
SHA256

7e0ff763c3c04c45e0aaf40e1508d16e49ecf5c195a1e7b5c6d601538e188426
SHA512

fe533d91703fc9c000787e85e611ff29c464b230c7bb89d0b2e89640fb95a04e3f8381f038c822530827d86ab4e9a3df2ffe69f5053a97e8418dbea5218dfa7d
SSDEEP

1536:DgzERKetBfmCCh1S3bYVmmVS3bj3Dezrejjl:DgzEAerfwhs3bYxS3yz2

Score

N/A

Malware Config

Signatures

Files

7e0ff763c3c04c45e0aaf40e1508d16e49ecf5c195a1e7b5c6d601538e188426
.exe windows x86

75c30007c563e247701ec2ea7ed66ed1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
IsValidCodePage
lstrcmpiA
DeleteFileW
GetModuleHandleA
HeapAlloc
GetVersion
SetFilePointer
GetModuleHandleW
GetTickCount
GetShortPathNameW
GetStringTypeW
GetExitCodeProcess
GetDriveTypeA
lstrcatA
GetLastError
DeleteFileW
HeapFree
SetEnvironmentVariableA
GetConsoleTitleA
DeleteFileW
HeapCreate
GetStdHandle

netshell

HrCreateDesktopIcon
DllCanUnloadNow
DllRegisterServer
HrLaunchConnection

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE