a09f16ae33cef007169ca368dde197ba32f4218c451c5fd43b4f49cf2ffa8ab6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a09f16ae33cef007169ca368dde197ba32f4218c451c5fd43b4f49cf2ffa8ab6
Size

766KB
MD5

0164ac9e4fd75f9f70cdda82a65a7fb8
SHA1

300ef4fead3580e1fdc1488885bbe9c52363dad2
SHA256

a09f16ae33cef007169ca368dde197ba32f4218c451c5fd43b4f49cf2ffa8ab6
SHA512

248744af323fa6385282af46a64b5862103fffdc1a4876abe605e5642835ed72ebf5f45cb84a3ca7efd8d090992ff53a4d87f58ddb7c59586be7dc102b27e8a0
SSDEEP

12288:WymmaXrn/NKSpDmKRiNv+v4XwQTRMS9LnHwfTAOzHpphEeTK3ajIK/1h:JI/NKS51TvUNTuSRn5a/hJ2qII

Score

N/A

Malware Config

Signatures

Files

a09f16ae33cef007169ca368dde197ba32f4218c451c5fd43b4f49cf2ffa8ab6
.exe windows x86

e5e4236909ad828db0da958f21eea33b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetDriveTypeA
FindResourceA
VirtualQueryEx
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetFileAttributesW
GetModuleHandleA
GetDriveTypeA
VirtualAllocEx
lstrlenA
DeleteFileW
GetModuleFileNameW
IsBadStringPtrW
GetDriveTypeA
GetDriveTypeA

msxml6

DllGetClassObject
DllSetProperty
DllRegisterServer
DllCanUnloadNow

Sections

.play
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.wdata
Size: 746KB - Virtual size: 751KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ