bb43b9f7461bad576522817d5203320e7a6b39e8c9927615597a10ad0f685810 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb43b9f7461bad576522817d5203320e7a6b39e8c9927615597a10ad0f685810
Size

818KB
MD5

a15af993abfb77d6560cd31d9022b250
SHA1

488122552340c5a384414db96aa0f86983fdd585
SHA256

bb43b9f7461bad576522817d5203320e7a6b39e8c9927615597a10ad0f685810
SHA512

047b75f9d2670b60c2625932b8df4fbb386fb8026d8f597252e2acf5a24090bd6b8af9841708afd39e34f1a8d1095721c51afc37fef95dd004850f5855d23199
SSDEEP

24576:PFyZpBUcCZj5VX72ATvsVH6dces/WMKBs2kU:dyZ9M5VjTEQs/gBs2

Score

N/A

Malware Config

Signatures

Files

bb43b9f7461bad576522817d5203320e7a6b39e8c9927615597a10ad0f685810
.exe windows x86

70e1ab67bab46528fbda1e066e7d85b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtectEx
GetCurrentDirectoryA
lstrcpynA
lstrcpynA
GetVolumeInformationA
lstrcpynA
ReadConsoleA
Heap32First
GetPrivateProfileIntA
GetFileType
lstrcpynA
OpenMutexW
lstrcpynA
SetThreadPriority
lstrcpynA
lstrcmpW
lstrcpynA
lstrcatA
VirtualFree
GetSystemTime
FindFirstVolumeA
GetDriveTypeA
GetCurrentThreadId
WriteFile
GetModuleHandleA
lstrcpynA
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA

cmdial32

RasCustomDialDlg
InetDialHandler
AutoDialFunc
RasCustomDial

Sections

.text
Size: 18KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ