a1986acc66f85737249d86b63c1626850246ff0f81b9d30fa86d69a7e59e90a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1986acc66f85737249d86b63c1626850246ff0f81b9d30fa86d69a7e59e90a6
Size

822KB
MD5

a0afc50f435301675f64933a4f289190
SHA1

409d6697467ba0040c7d69ba62ae70c3c9c63fc6
SHA256

a1986acc66f85737249d86b63c1626850246ff0f81b9d30fa86d69a7e59e90a6
SHA512

357c796e8d80fdcc1fa2a8ac9625b2e5f536b38ca790352ffaeaeeb4943254595a303628f7a0bed4a4728f68a2b925f954ed1f6e87f9c91ed8ba1cdba9df921c
SSDEEP

24576:4ZRr/A41iQU4NZjlmHeCLpBqjGk0DNYacHPVIj4c3:yhJ17U4njeeRjGk0hWv44c3

Score

N/A

Malware Config

Signatures

Files

a1986acc66f85737249d86b63c1626850246ff0f81b9d30fa86d69a7e59e90a6
.exe windows x86

76bc30a7d107f726d94b621a1641473e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
FindResourceA
lstrlenA
GetCurrentDirectoryW
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
VirtualAlloc
IsBadStringPtrW
GetDriveTypeA
GetFileAttributesW
GetModuleFileNameW
GetDriveTypeA
GetVolumeInformationA
GetModuleHandleA
GetDriveTypeA
DeleteFileW

msxml3

DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllMain

Sections

.play
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.wdata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ