79645d50c099415c7d350b48aed7a1f0b062217e9428185f366fe9730fd07d68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79645d50c099415c7d350b48aed7a1f0b062217e9428185f366fe9730fd07d68
Size

810KB
MD5

52daac9332fea90943a4855f3c339600
SHA1

3e06fc32d8da356534b3102751fbf1e3307ea08a
SHA256

79645d50c099415c7d350b48aed7a1f0b062217e9428185f366fe9730fd07d68
SHA512

bbbf493a75d22dd4b792c78dd3b62a1bc2c78b51cfb967bca2a230a894adcc840ab2a90a8c2306a83c775d1162681727aa1cb7c00e0fe7f1cbfcaf09f5aa1467
SSDEEP

12288:TSdFdLEP2G5ogYvPhrcaDUbGNgyfYTyT947yF5wiBLPlZM8BaCES:aHUNotPhrcakGNoIFXXPBaTS

Score

N/A

Malware Config

Signatures

Files

79645d50c099415c7d350b48aed7a1f0b062217e9428185f366fe9730fd07d68
.exe windows x86

7da72b505b70ff2eede33498f5392c39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLogicalDrives
GetModuleHandleA
GetStdHandle
SetCurrentDirectoryW
GetLogicalDrives
GetLogicalDriveStringsW
GetStringTypeA
GetFileAttributesA
GetModuleHandleW
GetLogicalDrives
lstrcpyW
OpenMutexW
VirtualProtect
GetLogicalDrives
CreateEventA
GetTickCount

scecli

SceOpenPolicy
SceSetupGenerateTemplate
DeltaNotify
InitializeChangeNotify

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.fdata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ