3661c993abffffd4b01f7fad266de05f0d4a092f4a1b22c913bacc353f762db3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3661c993abffffd4b01f7fad266de05f0d4a092f4a1b22c913bacc353f762db3
Size

811KB
MD5

22b113b423e35d3c7696412c27d87910
SHA1

7812224bcfae061ec5e3d9db62e30c26ffd33357
SHA256

3661c993abffffd4b01f7fad266de05f0d4a092f4a1b22c913bacc353f762db3
SHA512

bbb98f6d6d61d6cd377ef94e2c853e30bec87e84fb16e75acc01737255598408d06dfa5a83fd1f2a4208136766c36aedb1489576d57aa5bde4f8617b2ac30c0f
SSDEEP

24576:4vemGLS7xlzP6mHEI/j7TnjD/7ZZO3DsbEwGaHVM:6emG+VhfHJr7TjDTz8DsLL1M

Score

N/A

Malware Config

Signatures

Files

3661c993abffffd4b01f7fad266de05f0d4a092f4a1b22c913bacc353f762db3
.exe windows x86

fecfb44919bd8cf248d4a14557167d49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetEndOfFile
CreateEventA
GetLogicalDriveStringsW
GetStdHandle
SetEndOfFile
GetStringTypeW
VirtualProtectEx
lstrcpyW
LoadLibraryA
GetVersion
SetEndOfFile
GetFileAttributesA
SetEndOfFile
OpenMutexW
SetCurrentDirectoryW
SetEndOfFile

vssapi

??0CVssWriter@@QAE@XZ
??0CVssJetWriter@@QAE@XZ
IsVolumeSnapshotted
??1CVssJetWriter@@UAE@XZ

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 802KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE