fd6f538858f47a00704639585fde0a4e068666116131b3f253e1c61a0f25cd72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd6f538858f47a00704639585fde0a4e068666116131b3f253e1c61a0f25cd72
Size

762KB
MD5

611045fa7d160ad46fb6fe2662071440
SHA1

35fb3628fd4fdb8847c73000963f916e4c5a05da
SHA256

fd6f538858f47a00704639585fde0a4e068666116131b3f253e1c61a0f25cd72
SHA512

2270ce71860e307d78ebb96305ff6642aeceaa6960f384bc329a08e9736cffc0dfad05bc9bff1773cf8b210998ad1b6dbce0d16203efccdbb5d97df981c8addd
SSDEEP

12288:dymmaXrn/NKSpDmKRiNv+v4XwQTRMS9LnHwfTAOzHpphEeTK3ajIK/1h:8I/NKS51TvUNTuSRn5a/hJ2qII

Score

N/A

Malware Config

Signatures

Files

fd6f538858f47a00704639585fde0a4e068666116131b3f253e1c61a0f25cd72
.exe windows x86

2fabfcd64d1120d8a811f3326173d787

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
VirtualAlloc
GetDriveTypeW
GetDriveTypeW
GetModuleHandleA
FindResourceA
IsBadStringPtrW
GetDriveTypeW
GetDriveTypeW
GetVolumeInformationA
GetDriveTypeW
GetCurrentDirectoryW
DeleteFileW
GetDriveTypeW
GetFileSize
GetModuleFileNameW
lstrlenA

msxml3

DllGetClassObject
DllMain
DllRegisterServer
DllCanUnloadNow

Sections

.play
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.gdata
Size: 741KB - Virtual size: 747KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ