feb1156c8cd6e1f9cb128664f87c5e4501b7de5cd1db87d07fdb6ba4fdd818a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feb1156c8cd6e1f9cb128664f87c5e4501b7de5cd1db87d07fdb6ba4fdd818a9
Size

810KB
MD5

567f97d538da710a6f5a136006766430
SHA1

123b4e6b42b6afd678a37941d1e5ce4ff28b3a00
SHA256

feb1156c8cd6e1f9cb128664f87c5e4501b7de5cd1db87d07fdb6ba4fdd818a9
SHA512

ae966be78f151f02ddf4e9fec1843212dc029ea57c5e8da6a0db49a87ac66e1a6060ccd446368d0c8d660ea209ca2b4b53d67a1765f353e8396497e84fdc5f02
SSDEEP

24576:ccSvu/vRn+X8SjRTpJi2yYcQaFsQ9/UQfvROHPeQhC:fSavsxry9N8QIGQhC

Score

N/A

Malware Config

Signatures

Files

feb1156c8cd6e1f9cb128664f87c5e4501b7de5cd1db87d07fdb6ba4fdd818a9
.exe windows x86

695735d04441a46e0cc028e31c695e9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
VirtualProtectEx
lstrcpyW
GetFileAttributesA
GetStdHandle
CreateEventA
GetLogicalDrives
GetStringTypeA
GetLogicalDrives
GetModuleHandleW
GetLogicalDrives
OpenMutexA
GetModuleHandleA
GetLogicalDriveStringsW
SetCurrentDirectoryW
GetTickCount

riched20

IID_IRichEditOle
IID_ITextHost
RichEditANSIWndProc
RichEdit10ANSIWndProc

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.kdata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ