845f3b0df22699f544ebe46879adbe281660ce566807d2f28e76f9b511269b17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

845f3b0df22699f544ebe46879adbe281660ce566807d2f28e76f9b511269b17
Size

810KB
MD5

464ee26176c7680c24b56186ae7c4b20
SHA1

4c010dce8aa66dbe6496753e12e3713ec113b7b6
SHA256

845f3b0df22699f544ebe46879adbe281660ce566807d2f28e76f9b511269b17
SHA512

16da3623ab01159164fcc397132fd772c90891707f7487026c5bfcf0af3c51c81a715ce89a80853990853df00265381811307c83eae1e5ef9fe1f03c922da7af
SSDEEP

24576:ROpGyLETKf/Pc4ODFZvcLCYpOG/OAU3HdbM:ROpRc4OZZvcLCYvfU3Hl

Score

N/A

Malware Config

Signatures

Files

845f3b0df22699f544ebe46879adbe281660ce566807d2f28e76f9b511269b17
.exe windows x86

32b88f6929d857e2be3f6c157aa0ca2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLogicalDriveStringsW
GetFileAttributesA
SetCurrentDirectoryW
OpenMutexW
GetModuleHandleW
GetTickCount
GetLogicalDrives
lstrcpyW
GetLogicalDrives
GetStdHandle
GetStringTypeA
GetModuleHandleA
VirtualProtect
CreateEventA
GetLogicalDrives
GetLogicalDrives

scecli

InitializeChangeNotify
SceOpenPolicy
SceSetupGenerateTemplate
DeltaNotify

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ