3b5406545802ce02d6849cfbca666979749b7c24592cb764dd36e182130433c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5406545802ce02d6849cfbca666979749b7c24592cb764dd36e182130433c0
Size

816KB
MD5

0c0da23a09a1931295f19433565222f0
SHA1

c9395e3349445af33ada4f0f15673f5c8239d510
SHA256

3b5406545802ce02d6849cfbca666979749b7c24592cb764dd36e182130433c0
SHA512

df6fc35bf9293d21dae3e8fc879be714f41bc82608293d173cd52c4f33f5f64024f5e5967bcc8bdbb86de62dfbfc856bd9eff16029060944eae57df41e6fdd71
SSDEEP

24576:OuFiKNGNA5+ACaikrAIg+1uaa+DYPVPxApaaO:Ll2q+A71AIgIuCidR

Score

N/A

Malware Config

Signatures

Files

3b5406545802ce02d6849cfbca666979749b7c24592cb764dd36e182130433c0
.exe windows x86

352580a7bab51e9aec5a40207512227c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
MoveFileA
VirtualAlloc
GetDriveTypeW
GetCurrentDirectoryW
lstrlenA
GetVolumeInformationW
GetDriveTypeW
OpenMutexA
GetFileSize
GetDriveTypeW
FindResourceW
GetDriveTypeW
LoadLibraryA
GetDriveTypeW
GetDriveTypeW
GetVolumePathNameA

netshell

HrGetIconFromMediaType
HrLaunchConnection
HrRenameConnection
HrCreateDesktopIcon

Sections

.play
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.ydata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ