d32ea6658af53afb9459df6d9d292ee999ef4961f794ed1f5cf253e62801ff3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d32ea6658af53afb9459df6d9d292ee999ef4961f794ed1f5cf253e62801ff3d
Size

879KB
MD5

848fc7c915577614a47cfbf70f2cbb40
SHA1

a4b6fdadafca9005ffafaf6332b5478008e61568
SHA256

d32ea6658af53afb9459df6d9d292ee999ef4961f794ed1f5cf253e62801ff3d
SHA512

daad581756e588105366c1659252e0ef5f7a266e7ab45c6495628ab1dddcb972a483b7a74a505e088e1bc5c87768e1cd2da2ee874248d7f8f3366f7d019c4fde
SSDEEP

24576:7E0ZlmSK9Qi+ylPU3Hmv6UQWB9Er3fx2MbNM/CY:DZlmSK9QVlyQWBGvx2M/Y

Score

N/A

Malware Config

Signatures

Files

d32ea6658af53afb9459df6d9d292ee999ef4961f794ed1f5cf253e62801ff3d
.exe windows x86

ceb176736bbf9232a5627811833e4550

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetEndOfFile
SetEndOfFile
GetTickCount
SetEndOfFile
GetModuleFileNameA
GetFileAttributesA
SetCurrentDirectoryW
OpenEventA
SetEndOfFile
VirtualProtect
lstrcpyW
CreateEventA
SetEndOfFile
GetStringTypeW
LoadLibraryA
GetStdHandle

wmnetmgr

DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 869KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE