749ec09b1de0f0f52e35b633e196453a3c8b732faa96a5bb68080fdf80c31cc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

749ec09b1de0f0f52e35b633e196453a3c8b732faa96a5bb68080fdf80c31cc3
Size

775KB
MD5

6f0df0887fbccb5a4a67e3e288c9e960
SHA1

32ea64b6064887231c117a9c963c444463ce4275
SHA256

749ec09b1de0f0f52e35b633e196453a3c8b732faa96a5bb68080fdf80c31cc3
SHA512

216cf9fb5c69f09741d548401fff5e4273a1f08a09c85028c9d0bc0c8912a91489f3648aeb821b37e884f5d9a0ba47e9bdd773dd31f41ded717244d4bddc4ca7
SSDEEP

24576:WmEu3moh1jkMnVZHklW08nfGWoxwwwcjngU:fEuWorVnclW3eWawDcEU

Score

N/A

Malware Config

Signatures

Files

749ec09b1de0f0f52e35b633e196453a3c8b732faa96a5bb68080fdf80c31cc3
.exe windows x86

f603c4746de5a9177191b3ddde116083

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleA
GetTimeFormatA
GetVolumeInformationA
VirtualAlloc
GetDriveTypeA
CopyFileA
CreateFileMappingW
GetEnvironmentVariableA
GetFileAttributesA
LoadLibraryA
CompareStringW
HeapAlloc
FreeEnvironmentStringsW
CopyFileA
GetPrivateProfileStringA
CreateDirectoryA
ReadConsoleW

msdtcprx

DTC_XaPrepare
DTC_XaOpen
DTC_XaForget
DTC_XaStart

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 756KB - Virtual size: 763KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ