1ac279df279aeb23197ea0cff9aa8f664e36ba860b9ade31c5269a9f1f8e67d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ac279df279aeb23197ea0cff9aa8f664e36ba860b9ade31c5269a9f1f8e67d4
Size

810KB
MD5

65eddd3df54484358e0a5d2c8affcad0
SHA1

3072890152714bd7e20980cc29cac742ad20988e
SHA256

1ac279df279aeb23197ea0cff9aa8f664e36ba860b9ade31c5269a9f1f8e67d4
SHA512

94de3fbb11396b3ece8682220190bf1a2856a0f9e7c4e4f46261fa2a076b013731a29058f6b135df1036c58ea1f980fd23657fe419d0f070e150f6ecac97cdf4
SSDEEP

24576:FxV3FBWplXf+JgPZX5OW2o+6GjrfwfWzHuOC:FtBWjNRs2+7zOO

Score

N/A

Malware Config

Signatures

Files

1ac279df279aeb23197ea0cff9aa8f664e36ba860b9ade31c5269a9f1f8e67d4
.exe windows x86

1374acccc84d5f93dc8b5ebeeaa26bd9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetModuleHandleA
GetModuleHandleW
GetFileAttributesA
GetStdHandle
SetCurrentDirectoryW
OpenMutexA
GetLogicalDrives
GetLogicalDrives
GetTickCount
VirtualProtectEx
GetLogicalDriveStringsW
GetLogicalDrives
GetStringTypeA
GetLogicalDrives
lstrcpyW

riched20

IID_ITextHost
RichEditANSIWndProc
RichEdit10ANSIWndProc
IID_IRichEditOle

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.kdata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ