d28edb41cf1f5f807fded4e400870eb72b6d0a02281d3b338836ff836a1a4324 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d28edb41cf1f5f807fded4e400870eb72b6d0a02281d3b338836ff836a1a4324
Size

811KB
MD5

6d03987cfc8c1995d9d18c2219542010
SHA1

00c6566f76010a16bba9288c7c102acd27b3ba4f
SHA256

d28edb41cf1f5f807fded4e400870eb72b6d0a02281d3b338836ff836a1a4324
SHA512

9af0507e42bbf097fa9b18aaba31cfe5920b9caec37f1c0947575e9eda3fe13f1e362797a5b1adf4988bc489e860dc8c068dd62517ccd363b47f0fb6f32347c1
SSDEEP

24576:Lr+qd6C3DKT3ORukrfEJkyYvEDTZhtotwfD:LCqdL3D8qE9YcdV

Score

N/A

Malware Config

Signatures

Files

d28edb41cf1f5f807fded4e400870eb72b6d0a02281d3b338836ff836a1a4324
.exe windows x86

98f8bcf7451c0d77b2293efba84d870d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetEndOfFile
SetEndOfFile
OpenMutexW
GetFileAttributesA
CreateEventA
SetEndOfFile
GetVersion
SetCurrentDirectoryW
GetLogicalDriveStringsW
SetEndOfFile
lstrcpyW
SetEndOfFile
VirtualProtectEx
GetStringTypeW
LoadLibraryA
GetStdHandle

usp10

UspAllocCache
UspFreeMem
UspAllocTemp
ScriptBreak

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 802KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE