b0e1ac6158ab2dfd36dbdfe0fe4bb32ca36d750d678ef6d6153a54d37f62bbb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0e1ac6158ab2dfd36dbdfe0fe4bb32ca36d750d678ef6d6153a54d37f62bbb0
Size

812KB
MD5

05dddea5b292e18e3f998d2ff6118716
SHA1

57d63a193fe06f057967498604d2ab8894853131
SHA256

b0e1ac6158ab2dfd36dbdfe0fe4bb32ca36d750d678ef6d6153a54d37f62bbb0
SHA512

fbc936685d9584186b8a30f74b7930d81fb6659cded48fcd6e4d5e04135b2b737072c5f8c12fd81de42b6919210b9965706271e670fbaf2fe6713897385bee8c
SSDEEP

24576:lZU76++KiDUp6hPewqVyaZLT9+tNGpdg:lZU7qVUUhiQGTg

Score

N/A

Malware Config

Signatures

Files

b0e1ac6158ab2dfd36dbdfe0fe4bb32ca36d750d678ef6d6153a54d37f62bbb0
.exe windows x86

0af0c7ef5655f145ccb7ca8bedbbd686

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLogicalDrives
GetLogicalDrives
GetStringTypeA
LoadLibraryW
SetCurrentDirectoryW
CreateEventA
lstrcpyW
GetLogicalDrives
GetLogicalDrives
GetStdHandle
VirtualProtect
OpenMutexW
GetLogicalDriveStringsW
GetModuleHandleA
GetVersion
GetFileAttributesA

scrrun

DllCanUnloadNow
DoOpenPipeStream
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 802KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ