db9f92952b411ac66e333a28bf7892e62c97b659b9ca6d160f0811bdf7238f45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db9f92952b411ac66e333a28bf7892e62c97b659b9ca6d160f0811bdf7238f45
Size

66KB
MD5

d388ffe5aee6d6abe22018973c09cf37
SHA1

0af44b3c590bf19b5f4ecb6ee436d6b88820f1cc
SHA256

db9f92952b411ac66e333a28bf7892e62c97b659b9ca6d160f0811bdf7238f45
SHA512

401b0c272169dc8a839110e134dd9271ac1b577c392995dd2aa37fe208afd1db3c251379f7c197ec4eca786535b5d9c5fa699498fd65aa9720a995a3fa6de05c
SSDEEP

1536:FDS4zFzVlS4ht3SEresE08UFr/p5xVoubIDmsvtqJxxVfBd:F+4zlC4rcoFjp5xVoPvtG1fL

Score

N/A

Malware Config

Signatures

Files

db9f92952b411ac66e333a28bf7892e62c97b659b9ca6d160f0811bdf7238f45
.exe windows x86

033ec902273905781fb32270bbc87609

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
GetOEMCP
DebugSetProcessKillOnExit
GetVolumeInformationA
GetPrivateProfileIntW
LZCreateFileW
MoveFileWithProgressW
GetUserDefaultLangID
GetComPlusPackageInstallStatus
Sleep

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE