d6ba9a07f26cd36ee1130bb1a67cff3dcddeb517239da19d29057de2fb393020 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6ba9a07f26cd36ee1130bb1a67cff3dcddeb517239da19d29057de2fb393020
Size

830KB
MD5

5e8cd598042f29b44799c87ff3f14240
SHA1

d1ca5e379386e8a276b39b8f2988eff47f424749
SHA256

d6ba9a07f26cd36ee1130bb1a67cff3dcddeb517239da19d29057de2fb393020
SHA512

cae71fed8d610e1bd2519471bc4c469c117b4bb0ec08dc8d59cc9d0b683bc7bbdcab0c311289cee923347802a11a15c0f51f57755bb13a27faf6cec3247464b7
SSDEEP

12288:hISbVyr6v7AGLKXpZP9VYmI6AoCZHYRlAxAyQk8S+EQjR4t4BLAm7kZTB:SSByO0CKfEm9l0HYgeyQI+Ei4tsXA

Score

N/A

Malware Config

Signatures

Files

d6ba9a07f26cd36ee1130bb1a67cff3dcddeb517239da19d29057de2fb393020
.exe windows x86

c464195e75ad703fe8e4c4825d606976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateSemaphoreW
GetCommandLineA
MoveFileExA
OpenMutexA
GetDiskFreeSpaceA
WaitForSingleObject
HeapCreate
GetConsoleAliasA
GetCurrentProcess
GetStdHandle
EnumCalendarInfoW
CompareStringW
GetModuleHandleA
CreateEventA
GetFullPathNameA
GetLocaleInfoW
ResumeThread

hnetcfg

HNetGetSharingServicesPage
HNetFreeSharingServicesPage
HNetGetFirewallSettingsPage
HNetDeleteRasConnection

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_WRITE

.adata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ