0859fe831b835a4fe1987f2213ab3ab92e163876651d31c3decf4d825591d031 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0859fe831b835a4fe1987f2213ab3ab92e163876651d31c3decf4d825591d031
Size

832KB
MD5

63cda07486795810ddb32b6617468760
SHA1

50ad94b140d126399084bbd768243aeed24f50f2
SHA256

0859fe831b835a4fe1987f2213ab3ab92e163876651d31c3decf4d825591d031
SHA512

bb3969cec32259d7eb511c12b142632ebe803ae1822294dc6d62c030976110d48e905d4a5a22dd42dd7e1f6b633c5b816f427d21973ee9d737283fb57ddc4b44
SSDEEP

24576:R1irbI9yaj5kE21HZaPe7+lY4xLAbqlnjuJ8:viwBj5JE+eqWmlnju

Score

N/A

Malware Config

Signatures

Files

0859fe831b835a4fe1987f2213ab3ab92e163876651d31c3decf4d825591d031
.exe windows x86

97d5126c5f792693da95edd494311a25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
WriteConsoleW
GetConsoleTitleA
GetPrivateProfileStringA
CopyFileA
SetConsoleTitleA
CreateDirectoryW
VirtualAllocEx
GetTimeFormatW
WaitForSingleObject
GetDriveTypeW
CopyFileA
GetEnvironmentVariableA
GetModuleHandleA
CompareStringW
GetVolumeInformationA
FreeEnvironmentStringsW

msoeacct

DllCanUnloadNow
ValidEmailAddress
HrCreateAccountManager
DllGetClassObject

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.kdata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE