4dd5a03025557938fbf48215922449987a0e5ba84ef879bedaed5163b87ff6be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dd5a03025557938fbf48215922449987a0e5ba84ef879bedaed5163b87ff6be
Size

811KB
MD5

4cfcbb268c428766094191ac2f7f1001
SHA1

acec27699663fb7ec32cab6141bfc4b80d47ee8c
SHA256

4dd5a03025557938fbf48215922449987a0e5ba84ef879bedaed5163b87ff6be
SHA512

8799740c43e0b2331a08b5e01144d91099f4c937db312ca03094a35067a025b40a6553d961f0d186882d78d97807f8c0c4fb49d40afc3a92a94b232436c48d11
SSDEEP

24576:v3cFg1qeo8nxiNRAxIfG1hatBY6xVH7G5:4jcOfx3Y6fH

Score

N/A

Malware Config

Signatures

Files

4dd5a03025557938fbf48215922449987a0e5ba84ef879bedaed5163b87ff6be
.exe windows x86

d0b4d68cafaa5d78fd6de3a4bc2ad453

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStringTypeW
SetCurrentDirectoryW
GetLogicalDriveStringsW
CreateEventA
SetEndOfFile
lstrcpyW
LoadLibraryA
SetEndOfFile
GetFileAttributesA
VirtualProtectEx
SetEndOfFile
GetVersion
GetStdHandle
SetEndOfFile
SetEndOfFile
OpenMutexW

usp10

UspFreeMem
ScriptBreak
UspAllocCache
UspAllocTemp

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 802KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE