faf78c82ca716d142a57c7f171befc3e48f52ef4e3a207bd4aa1352592684549 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faf78c82ca716d142a57c7f171befc3e48f52ef4e3a207bd4aa1352592684549
Size

810KB
MD5

7b06b5605c025ead1ea2c3edae6a6bb1
SHA1

78b5e6a2e4c61001c87df0cbcd0b20e59c8a1781
SHA256

faf78c82ca716d142a57c7f171befc3e48f52ef4e3a207bd4aa1352592684549
SHA512

3e0bc28b468f7da22c1157303781ef43ee46d470a69500f3d38191cbd0867ac62892d9e88c7dacf1d2e479f059cf2b343ce489ee2eb33c611b071b21ffe91ab6
SSDEEP

12288:a2I9UDLiGbRVV/z+uXES7KhKxDyuVL8VoxQ2EQcGSlPAbKFkS5uRioV4mxl:l3H/V/yuUPhKxT8xT5AbUkSsVv

Score

N/A

Malware Config

Signatures

Files

faf78c82ca716d142a57c7f171befc3e48f52ef4e3a207bd4aa1352592684549
.exe windows x86

0d3247e0469bcb68e97c467a836705b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
lstrcpyW
OpenMutexW
GetTickCount
SetCurrentDirectoryW
GetStringTypeA
VirtualProtectEx
GetLogicalDriveStringsW
GetModuleHandleW
GetModuleHandleA
GetLogicalDrives
GetLogicalDrives
GetLogicalDrives
GetFileAttributesA
CreateEventA
GetStdHandle

riched20

RichEditANSIWndProc
IID_IRichEditOle
IID_ITextHost
RichEdit10ANSIWndProc

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.kdata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ