f748251fef1e1586a9f15d1f82ed4788eb19facb6b0d0fda79d0813c808703f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f748251fef1e1586a9f15d1f82ed4788eb19facb6b0d0fda79d0813c808703f7
Size

832KB
MD5

0b341bb1d14340aa339ceb5b2d94b1f6
SHA1

31c5f35423e322d9571f049cc34422bb158af842
SHA256

f748251fef1e1586a9f15d1f82ed4788eb19facb6b0d0fda79d0813c808703f7
SHA512

00b22baa09947beed8e8e49d7cc4e95307ec8ed97d393cbcdff0795b5cbcfde7e0b92e905d8b058a7d189c8318fd49bc541717c26095b68f465d8fedc0597795
SSDEEP

24576:87ekytygcbgmgXM7qqGnJpbCec1A+Rn+U38m/q:87FMyimqqCpbCG+Rn+7S

Score

N/A

Malware Config

Signatures

Files

f748251fef1e1586a9f15d1f82ed4788eb19facb6b0d0fda79d0813c808703f7
.exe windows x86

5499814b0849ec6dd2e953b9b122d946

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
GetEnvironmentStringsW
GetTimeFormatA
GetDriveTypeA
GetVolumeInformationA
HeapAlloc
WriteConsoleA
ReadConsoleA
GetFileAttributesA
CreateFileMappingA
CopyFileA
LoadLibraryA
FreeEnvironmentStringsW
GetDiskFreeSpaceW
VirtualAlloc
CopyFileA
CreateDirectoryA

msdtcprx

DTC_XaStart
DTC_XaOpen
DTC_XaPrepare
DTC_XaEnd

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ