31617e95bc7e7d4e63674467e3462c8d8944a15a7a52b4688cbd52d2b19e1e67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31617e95bc7e7d4e63674467e3462c8d8944a15a7a52b4688cbd52d2b19e1e67
Size

822KB
MD5

454201aa9ffdd18bef31c37be9042e41
SHA1

c64bad4b43b75592080a012c6d8b4c2ddf670703
SHA256

31617e95bc7e7d4e63674467e3462c8d8944a15a7a52b4688cbd52d2b19e1e67
SHA512

2cf50e4dc723f322960b7aaedcb7dbd0c08f2439bbf724dd3c82413f7e6fe0a7c2b54ff16cb6212487e9edc24e8fcd87cea8c955ae8080f4226068df5e61a399
SSDEEP

24576:Wa8l51mVNukfm8JUlQuKdSR4Lt839HELt+Tr:Ml51ONTfJgQuKdSR4L89kLt

Score

N/A

Malware Config

Signatures

Files

31617e95bc7e7d4e63674467e3462c8d8944a15a7a52b4688cbd52d2b19e1e67
.exe windows x86

1cef047c18c4476b700d9ae9f2c2b3a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetFileType
GetEnvironmentVariableW
lstrcatA
GetCurrentDirectoryA
VirtualProtectEx
CompareStringW
GetDiskFreeSpaceW
GetPrivateProfileIntW
GetModuleHandleA
WriteFile
CreateMailslotW
lstrcmpW
GetVolumeInformationA
GetSystemTime
VirtualFree
ReadConsoleW
GetLastError
GetTimeFormatA
GetProcessHeap

dmdskmgr

?namecmp@@YGHPBG0@Z
DllCanUnloadNow
DllRegisterServer
DllGetClassObject

Sections

.text
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 798KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ