1b3d19054b5ba2b2e692824bd7dba0cc84a77e9b99f2b58359b21150142fbd0e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b3d19054b5ba2b2e692824bd7dba0cc84a77e9b99f2b58359b21150142fbd0e
Size

821KB
MD5

49f84556387c2e26069f6fddfd702e91
SHA1

988d9111bfee5e8b561b16b65058bc45759cd2dc
SHA256

1b3d19054b5ba2b2e692824bd7dba0cc84a77e9b99f2b58359b21150142fbd0e
SHA512

75e65406f8e494b65cb83d48112a3e357afd304aba57ade60e07f7f660436648df6436c7ad0fdef33b510897e3e84917dc5b45302066229bb0b4a2375b1598bb
SSDEEP

24576:pTVCv+1ncdVRUKY8jiZm2AyXfQlfNnH9LJ:pTKXUsjsmlyKN/

Score

N/A

Malware Config

Signatures

Files

1b3d19054b5ba2b2e692824bd7dba0cc84a77e9b99f2b58359b21150142fbd0e
.exe windows x86

cb02944d81b0ff8860b5a9b02c3f91d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetEnvironmentVariableW
GetProcessHeap
GetModuleHandleA
GetDiskFreeSpaceW
VirtualProtectEx
WriteFile
GetCurrentDirectoryA
CreateMailslotA
GetVolumeInformationA
lstrcatA
GetPrivateProfileIntW
ReadConsoleW
VirtualFree
lstrcmpW
GetLastError
GetFileType
CompareStringW
GetSystemTime
GetTimeFormatA

dmdskmgr

?namecmp@@YGHPBG0@Z
DllRegisterServer
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ