9cfff1658cc21656f6715ec53b254ce09824e56c604d6b49c77acfe44ce74c25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9cfff1658cc21656f6715ec53b254ce09824e56c604d6b49c77acfe44ce74c25
Size

832KB
MD5

6462414ac8631d0b1b930ce13691992c
SHA1

135b5243eddfed4c6eb582c58a02fbe99af0289c
SHA256

9cfff1658cc21656f6715ec53b254ce09824e56c604d6b49c77acfe44ce74c25
SHA512

2f7512d62619ed76d553692d049409225e586251c817ab55c7047834a75f42f5b7ed5b339be6edce3e357aef6b3ed4813cf52ea6b31d79549a498b82cd7125d0
SSDEEP

12288:VsN4N6WKeXwsP9Cppddu8IzDWd/JktzEsGQDwrasJh9xCiq1l9xONnPxp07WY:VsHu9a28Iw16sJnxbq1l9Q5Px7

Score

N/A

Malware Config

Signatures

Files

9cfff1658cc21656f6715ec53b254ce09824e56c604d6b49c77acfe44ce74c25
.exe windows x86

45fc2d7e47295a765a87df250f87a6e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
GetFileAttributesA
GetModuleHandleA
CreateDirectoryA
CompareStringA
HeapAlloc
GetDiskFreeSpaceW
FreeEnvironmentStringsA
CopyFileA
WriteConsoleA
GetEnvironmentStringsW
CopyFileA
GetDriveTypeA
ReadConsoleA
HeapCreate
GetBinaryTypeW
SearchPathW

msdtcprx

DTC_XaPrepare
DTC_XaStart
DTC_XaEnd
DTC_XaOpen

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ