e15b141a224e1efefc74315c2bf1ce106c97cfa468a868654788c8a9598e7f0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e15b141a224e1efefc74315c2bf1ce106c97cfa468a868654788c8a9598e7f0f
Size

297KB
MD5

755b17614f7630cca31ac8cf4607bea8
SHA1

96147cd0ca8b9022d32d0c5c11243af42a4bce22
SHA256

e15b141a224e1efefc74315c2bf1ce106c97cfa468a868654788c8a9598e7f0f
SHA512

62d5f404ef26fb8daa83db2fe152382436e2161864e5c932f9f126e91df1f42ba74432880c4388735d3cdd9a810746ec133d4bd7102f7e58e9a91a7ec357c0a0
SSDEEP

6144:lRLhFei2zHxYUMCq0gyD7atlO9XgWMQ8wijitqiK7:n1k3zHxv40H9wWch

Score

N/A

Malware Config

Signatures

Files

e15b141a224e1efefc74315c2bf1ce106c97cfa468a868654788c8a9598e7f0f
.exe windows x86

304a778c087dfe612a2c9486d4ac2ea9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetStringTypeA
ReadConsoleW
GetConsoleMode
GetEnvironmentVariableW
CreateFileMappingA
CloseHandle
GetModuleHandleW
GetCurrentDirectoryW
VirtualFree
CreateSemaphoreA
CloseHandle
FindFirstVolumeW
CreateFileA
CopyFileA
GetFullPathNameW
GetModuleHandleA
GetVolumePathNameW
HeapCreate
FindNextVolumeW
SetVolumeLabelA
CloseHandle
GetFullPathNameW

dbghelp

FindFileInPath
ImageRvaToSection
ImageRvaToVa
ImageNtHeader

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.RES
Size: 292KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE