d7aaa053598b3855b931f2ec759cb477f4eb415261d5a89a06958a842d807c38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7aaa053598b3855b931f2ec759cb477f4eb415261d5a89a06958a842d807c38
Size

120KB
MD5

917ea1f8198c4a1160dc159ce4069252
SHA1

c02225df1028cb126b92a2e4a1e2ac4a62a43794
SHA256

d7aaa053598b3855b931f2ec759cb477f4eb415261d5a89a06958a842d807c38
SHA512

b3eb7f81e70b8adbcc7480584a7b1c5ade53b557eab970ff2991858d27e9ccd9e46d554aee17b478b14f4c64971fdf79dd124a7c5ea8ea3d4a57f55b9c48fddc
SSDEEP

3072:B1LKhNcUnohUJanl605qBRcmfWKP4wbZoC61:zLKniaRNt

Score

N/A

Malware Config

Signatures

Files

d7aaa053598b3855b931f2ec759cb477f4eb415261d5a89a06958a842d807c38
.exe windows x86

df840bbc40db80275e8d4f7356125aa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetFullPathNameW
FindFirstVolumeW
CloseHandle
GetModuleHandleW
CloseHandle
GetEnvironmentVariableW
GetFullPathNameW
GetCurrentDirectoryA
FindNextVolumeW
GetConsoleMode
OpenMutexW
WaitForMultipleObjects
HeapCreate
GetModuleHandleA
CloseHandle
Sleep
SetVolumeLabelA
GetStringTypeA
CopyFileA
ReadConsoleA
GetVolumePathNameW
CreateSemaphoreA

dbghelp

ImageRvaToSection
FindFileInPath
ImageRvaToVa
ImageNtHeader

Sections

.text
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.RES
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE