0f90cbba057c43a0f389b28d3060c1bf36f757a1918fe0cb9f512266233e5449 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f90cbba057c43a0f389b28d3060c1bf36f757a1918fe0cb9f512266233e5449
Size

822KB
MD5

633f74d762daca42bbe9008d861d12d1
SHA1

05c20af42a4c5ec2a406f94b67dd43e90a45670b
SHA256

0f90cbba057c43a0f389b28d3060c1bf36f757a1918fe0cb9f512266233e5449
SHA512

ea3c20d13ee31c81ff5c55f0f898fcdd2019a0e958e9902f965aef218cf35c564b7400aef29b830835f12effb01759e778703f9b17363e2d172fe7eb2a5fa01f
SSDEEP

12288:rbJ0JUA8HImFggJSsAA5pwYf31DszslN3TebXvH+yh3k0ifaC1Q8vK:PUtujA+h/1DsolN3TebhaZyC1Qg

Score

N/A

Malware Config

Signatures

Files

0f90cbba057c43a0f389b28d3060c1bf36f757a1918fe0cb9f512266233e5449
.exe windows x86

cad0a9131000abd8e67a4a650f193dbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
GetDriveTypeW
GetModuleHandleA
GetDriveTypeW
GetModuleFileNameW
GetDriveTypeW
DeleteFileW
GetDriveTypeW
IsBadStringPtrW
GetFileSize
GetCurrentDirectoryW
GetDriveTypeW
VirtualAlloc
lstrlenA
FindResourceA
GetVolumeInformationA
GetDriveTypeW

msxml3

DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllMain

Sections

.play
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.edata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ