966805d0c5091b477e55259dae1b725592bedca3e9daddba70b20f3cb979454b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

966805d0c5091b477e55259dae1b725592bedca3e9daddba70b20f3cb979454b
Size

821KB
MD5

0619a28a4d3cd159af0655e20140e9f6
SHA1

cf17bd364f3a56496105c30b560074e73738f5eb
SHA256

966805d0c5091b477e55259dae1b725592bedca3e9daddba70b20f3cb979454b
SHA512

bc430fcf6280d67c6d7c7629ab8e150043d4759d25d0ad2fe3f8c75dc4eb69365f795c0883c1a7e43d735d87a6e0cb79d30825c4813f596c88f82a912a659a9d
SSDEEP

12288:att2sFez8fE4XRcTp4zLNqD9XkB6sQwozNc/Wwufe2zjPojJ4FZC0mUNxKMAgjM+:Tzv4XRcTuzA5kBLazNc/WE2zAJ8eWA2

Score

N/A

Malware Config

Signatures

Files

966805d0c5091b477e55259dae1b725592bedca3e9daddba70b20f3cb979454b
.exe windows x86

dba001249c92627553cc1e4d1180c0d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateMailslotW
GetProcessHeap
GetTimeFormatA
GetPrivateProfileIntW
lstrcmpW
GetFileType
lstrcatA
GetCurrentDirectoryA
GetVolumeInformationA
GetSystemTime
GetLastError
GetModuleHandleA
WriteFile
GetDiskFreeSpaceW
VirtualProtectEx
ReadConsoleW
VirtualFree
GetEnvironmentVariableW
CompareStringW

dmdskmgr

DllCanUnloadNow
?namecmp@@YGHPBG0@Z
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ