35eed443221768a006908396f0139fc9d88723716a24eb9b04991328bbeea2a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35eed443221768a006908396f0139fc9d88723716a24eb9b04991328bbeea2a1
Size

810KB
MD5

48c4352bcb80576138b888b507fed430
SHA1

af97ed0d383c489c219ce6a48a1a435a1851d7c2
SHA256

35eed443221768a006908396f0139fc9d88723716a24eb9b04991328bbeea2a1
SHA512

d083530cddc41123d3608b888d9cc0c56d6eeb7816889d706571f623829004de0c2f2e1a72a025400fdb1f6495d9466980b8d55e27f13488a95a0e071dbdb716
SSDEEP

24576:szeR1rpVJ4X4BOli8gouOhI+TdsxnhW/9D:T1rpV2X4E88qOh02D

Score

N/A

Malware Config

Signatures

Files

35eed443221768a006908396f0139fc9d88723716a24eb9b04991328bbeea2a1
.exe windows x86

0f9b58decda2c6c5c00f630d13d4df9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleW
GetStdHandle
GetFileAttributesA
GetModuleHandleA
CreateEventA
GetLogicalDrives
GetLogicalDriveStringsW
GetLogicalDrives
GetLogicalDrives
GetStringTypeA
SetCurrentDirectoryW
GetLogicalDrives
OpenMutexW
VirtualProtect
lstrcpyW
GetTickCount

scecli

InitializeChangeNotify
DeltaNotify
SceSetupGenerateTemplate
SceOpenPolicy

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.fdata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ