29d04169340dadd4786e1568b7666b26e3a5528d19ec032c883219b107af5433 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29d04169340dadd4786e1568b7666b26e3a5528d19ec032c883219b107af5433
Size

816KB
MD5

61c992db174007d9f6039d5563e068c0
SHA1

84b20da70a1eb6889bb6c0699428e95f4db7d3aa
SHA256

29d04169340dadd4786e1568b7666b26e3a5528d19ec032c883219b107af5433
SHA512

0f00e5e6562943be0cbe64a5a872b2478d80d00bbb8914a6202d812ba99de3e2cb673903ef23040d0c6fd6a6a22c4aa6c54aec65780f9ff5de9c788728b5daad
SSDEEP

24576:c6tL+3YfXp5GWoB8BgQRkXRi1SZNKtN/Mx:cqL+3wjo8BgQ6VHKX/

Score

N/A

Malware Config

Signatures

Files

29d04169340dadd4786e1568b7666b26e3a5528d19ec032c883219b107af5433
.exe windows x86

2e5dd063088598c7b4888b5261db0a57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreW
MoveFileA
GetLastError
GetVolumeInformationW
LoadLibraryA
GetLastError
GetCurrentDirectoryW
CreateMutexA
VirtualProtect
lstrlenW
GetLastError
GetLastError
GetFileTime
GetVolumePathNameW
GetLastError
GetLastError
GetLastError

objsel

DllGetClassObject
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow

Sections

.play
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.DATA
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE