dbab197a1584cd7369f80f527185d965adb380285778a571c607b003d24ba911 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbab197a1584cd7369f80f527185d965adb380285778a571c607b003d24ba911
Size

814KB
MD5

e05ceff33489d6ec02347abf2fbb2721
SHA1

6d8e5f4e48046d90d3005c9c136d1f224eb4a747
SHA256

dbab197a1584cd7369f80f527185d965adb380285778a571c607b003d24ba911
SHA512

53765f71594f6840727e9b2f442e4c47be2f75ad2dcdb31b3d52f8585801191d47ac1473f6ad5ada5e7e2261794a9db8bb1b33a805d49ea304af32d33893b219
SSDEEP

12288:Q50susl7REar3Gl6SQvu0DIS9slIroMQEPbk0P6otnj1EkF4eOWPoSJnwV0KD0RY:QODk3c6SQm0sSSmsMbHSocEosXNO

Score

N/A

Malware Config

Signatures

Files

dbab197a1584cd7369f80f527185d965adb380285778a571c607b003d24ba911
.exe windows x86

68db90d18005d735a9c9cc8f178ebd0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNameA
lstrlenA
GetFileSize
DeleteFileW
GetDriveTypeW
GetDriveTypeW
OpenMutexA
GetDriveTypeW
GetVolumeInformationA
LoadLibraryA
GetDriveTypeW
VirtualAlloc
FindResourceW
GetDriveTypeW
GetDriveTypeW
GetCurrentDirectoryW
GetDriveTypeW

msxml6

DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllSetProperty

Sections

.play
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ