b1c29db5b2bd732643b255ba1a599391cf893b92b7777e53c92b8d16c1858c4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1c29db5b2bd732643b255ba1a599391cf893b92b7777e53c92b8d16c1858c4f
Size

810KB
MD5

9202404578888b78bbc5de022a518530
SHA1

29c73432199c975b7faa55c936b7fcf2eb5ca998
SHA256

b1c29db5b2bd732643b255ba1a599391cf893b92b7777e53c92b8d16c1858c4f
SHA512

38b3635f813859896254d3ee0b8bf687f6888c209dca79b3eb7d880debcf2d6585b3ae1696489b16f69b78994bc9693e10f337b319902fd34a7c65f867e80372
SSDEEP

24576:CIp5vTY7mq94D/9M+jql1G2yvx8RJdc6d7aft:3r7Re4b9Djq6tWNdWf

Score

N/A

Malware Config

Signatures

Files

b1c29db5b2bd732643b255ba1a599391cf893b92b7777e53c92b8d16c1858c4f
.exe windows x86

feb531bbd810a2c154ed78233187c3a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreW
GetFullPathNameW
SetLastError
VirtualProtectEx
SetLastError
MoveFileW
lstrcpyA
GetLogicalDriveStringsW
OpenMutexA
SetCurrentDirectoryA
SetLastError
GetModuleHandleA
SetLastError
SetLastError
SetLastError
GetTickCount

riched20

IID_ITextHost
RichEditANSIWndProc
IID_IRichEditOle
RichEdit10ANSIWndProc

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.ndata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ