e95c30a663da3e2c98daad61d8805082e8cde81fe7710c1eccf85c2b7ea9379e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e95c30a663da3e2c98daad61d8805082e8cde81fe7710c1eccf85c2b7ea9379e
Size

111KB
MD5

5e9f672c595f69d1d56c97d9ff4b19c0
SHA1

e7a5f4865bfa9a7b970330fa85733a4e94adebf1
SHA256

e95c30a663da3e2c98daad61d8805082e8cde81fe7710c1eccf85c2b7ea9379e
SHA512

bbb3a9d935b249f7fd333e7bce21bcd6efc86082acec4d1dc6f17142fca78a1315325147bdaf5dc3ce08ee673fa5dc4c82cc6b7ea41207bdcb0df7def91df65d
SSDEEP

3072:+Py20Vb4ki13RyFAeI7DGbaHs2qH2k54:0y20NhiN5BG2OF4

Score

N/A

Malware Config

Signatures

Files

e95c30a663da3e2c98daad61d8805082e8cde81fe7710c1eccf85c2b7ea9379e
.exe windows x86

6fcba30eff252bc2770bfb9d7526bc38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleDisplayMode
GetOEMCP
lstrcpy
lstrcmp
VDMOperationStarted
UpdateResourceW
SetStdHandle
GetLongPathNameW
GetSystemTime
FindFirstVolumeMountPointA
RemoveDirectoryW
WriteConsoleInputVDMW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE