dfe95af6a00737d9045a4e366fa8d7bb8afcbef5f633e3aa722e47f5451233d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfe95af6a00737d9045a4e366fa8d7bb8afcbef5f633e3aa722e47f5451233d6
Size

76KB
MD5

6bce0b83bca529e0a2f496b5fbdad32e
SHA1

4996d7bfbdec62ad7f1a24a134059dcbc3cb881a
SHA256

dfe95af6a00737d9045a4e366fa8d7bb8afcbef5f633e3aa722e47f5451233d6
SHA512

cbde179cd329dabc2f88dc1e55cd2380978ec482e8aa7151d2e0b1468d6cdd37a12f230971bbcb24d16232f1a34c6c1c62cf4f0d2bbab71a82746e60f087bfec
SSDEEP

1536:38+vkrwRYFckmXV9a6VLuky290yr8pjVrs2ryrd1vUQuq6:Mckr/Le09290Hs2qo

Score

N/A

Malware Config

Signatures

Files

dfe95af6a00737d9045a4e366fa8d7bb8afcbef5f633e3aa722e47f5451233d6
.exe windows x86

0d93a3b131856a93225a6b93a3e90623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Toolhelp32ReadProcessMemory
GetDiskFreeSpaceExW
GetConsoleCursorInfo
SetFirmwareEnvironmentVariableW
SetVolumeLabelA
WinExec
VirtualAllocEx
UnmapViewOfFile
SetThreadIdealProcessor
TermsrvAppInstallMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE