4c30eb4e73b15513ad8d5d9270b63b6531f3b35964e673e7b7056aa45fdc806e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c30eb4e73b15513ad8d5d9270b63b6531f3b35964e673e7b7056aa45fdc806e
Size

812KB
MD5

4d144d0c33d24f1199df988fc882a9f0
SHA1

1a1818dfaaa09d202ae90079515835aff75e2db0
SHA256

4c30eb4e73b15513ad8d5d9270b63b6531f3b35964e673e7b7056aa45fdc806e
SHA512

0a299cd0cd50deddaf81396901f30d70ba389231aa69fbe3036e06867912eeb5956b3974ddd105455b5f69969b27741783974f5d8aa7f11e8250134bbaecb908
SSDEEP

12288:4t/tDH1PGJyVIfiXXwDEOia99vPjpUKbgeNhvNMMlsKN1zlKCJtrFGzuVa2M3OmB:MDZVI6XXXd6SKbHt4CJtrFynOmB

Score

N/A

Malware Config

Signatures

Files

4c30eb4e73b15513ad8d5d9270b63b6531f3b35964e673e7b7056aa45fdc806e
.exe windows x86

1fbef2e77afbf5cd230b2e3abacd1586

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryW
GetStringTypeA
VirtualProtect
lstrcpyW
GetLogicalDrives
SetCurrentDirectoryW
GetLogicalDrives
OpenMutexW
GetLogicalDrives
GetFileAttributesA
GetLogicalDrives
GetModuleHandleA
GetStdHandle
GetLogicalDriveStringsW
CreateEventA
GetVersion

scrrun

DoOpenPipeStream
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 802KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ