29772cd68e402e9af3f0078fdfd378741723bd0aad26d604cfdf2a97cf5f2199 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29772cd68e402e9af3f0078fdfd378741723bd0aad26d604cfdf2a97cf5f2199
Size

824KB
MD5

a1130fbbad5e8eddcf388ae83c3805d0
SHA1

0931d64be1b129161d75aac3177e5adad42413f4
SHA256

29772cd68e402e9af3f0078fdfd378741723bd0aad26d604cfdf2a97cf5f2199
SHA512

7d92df66ac92f237eebc4eaeef93c01882752311c6f7a56bc97adf3d04fd22c9fd29449e45147b2e0be6ed63024ec663c4c53411e0fcf5a337af35a467778688
SSDEEP

12288:0kBt3haFlaxemXvRIPNfKngYPsg5mhc8Pu90MV+LbY1M1UgFqr2y6:vt3gFlaxeZPNfABT8Pueq4b91lFJy

Score

N/A

Malware Config

Signatures

Files

29772cd68e402e9af3f0078fdfd378741723bd0aad26d604cfdf2a97cf5f2199
.exe windows x86

45086eb4dcd4be642f8460d564fd68b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameW
GetModuleFileNameA
GetDriveTypeA
HeapCreate
GetDriveTypeA
GetDriveTypeA
DeleteFileA
GetDriveTypeA
VirtualQuery
LoadLibraryA
GetDriveTypeA
GetFileAttributesA
GetDriveTypeA
IsBadStringPtrA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA

msxml6

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.txt
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 805KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ