3ab7eaefc255045feb0872e9ee73f91937646da3df0d61b5604a2a444b56adf7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ab7eaefc255045feb0872e9ee73f91937646da3df0d61b5604a2a444b56adf7
Size

303KB
MD5

74ace9ca1175ff53886c1a6eab5124b1
SHA1

60a4c97ae2085e9da9b3512c68a8b1d13f8f95ab
SHA256

3ab7eaefc255045feb0872e9ee73f91937646da3df0d61b5604a2a444b56adf7
SHA512

eda5406f70d9fae2fe1cedfc8aa3c4ba84bc149901721d9f08d15e4e1964a225d63be5d2b906da5ca7fd763eaa4c227bfe72b7a8edfc52a1b486fd12ce1eccfb
SSDEEP

6144:Y+IhFwMaUFW3tVCwoCVqRcKXBBxbXkEgPF/qbG46LZmGcgUSZPEJHEoeTn/VTzXZ:Vs7Ng9ovxTxbUEIBOwLZtiOj7NQC

Score

N/A

Malware Config

Signatures

Files

3ab7eaefc255045feb0872e9ee73f91937646da3df0d61b5604a2a444b56adf7
.exe windows x86

ce3e3b5b369df194b7e03815f4f3ccdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
TlsAlloc
lstrcpyW
lstrlenW
GetModuleFileNameA
lstrcpyW
SetStdHandle
FindFirstVolumeW
GetNumberFormatA
IsBadStringPtrW
lstrcpyW
FindNextVolumeA
GetModuleHandleA
GetStartupInfoW
GetTickCount
CreateEventA
DeleteFileA
SetConsoleTitleA
GetLocaleInfoA
VirtualAllocEx
lstrcpyW
SetCurrentDirectoryA
lstrcpyW

untfs

Extend
Recover
Format
ChkdskEx

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RData
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EDATA
Size: 512B - Virtual size: 273B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE