6424fdbe196eb515abac4668f1d52d4c194042d18021e0c4c79abf5aec8953f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6424fdbe196eb515abac4668f1d52d4c194042d18021e0c4c79abf5aec8953f6
Size

812KB
MD5

54a95ca7409758925b3d03e637639376
SHA1

543144151ff2c5363c40a690db9f580a8025856a
SHA256

6424fdbe196eb515abac4668f1d52d4c194042d18021e0c4c79abf5aec8953f6
SHA512

6cd336b9bd9c8f318e695f0813b7d2ebcfff456952e02c63f7cd032ee05f8b816f69e7f3ebefca796bc0bf94c016a29e9be6ca4ff8786d2564c09faa75841f61
SSDEEP

12288:B3rFTml9ZgAY0czAVbed5FEuRqWrmbx85cjq5lM7SLt6O+HUN/MIlV57W79/l247:DS9Z7+EVb+fEF6Iscoi7nnHU6AVcpFr

Score

N/A

Malware Config

Signatures

Files

6424fdbe196eb515abac4668f1d52d4c194042d18021e0c4c79abf5aec8953f6
.exe windows x86

c07830bc80288d044748a14fc61a4ae4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetFileAttributesA
GetModuleHandleA
OpenMutexW
GetLogicalDrives
VirtualProtect
GetLogicalDriveStringsW
GetStdHandle
GetLogicalDrives
CreateEventA
GetLogicalDrives
GetStringTypeA
lstrcpyW
GetLogicalDrives
LoadLibraryW
SetCurrentDirectoryW
GetVersion

scrrun

DllCanUnloadNow
DoOpenPipeStream
DllUnregisterServer
DllRegisterServer

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 802KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ