df008ef240cb907df0d3d5f6c069400ffd788d701c2ded50a30e4d03c26cee45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df008ef240cb907df0d3d5f6c069400ffd788d701c2ded50a30e4d03c26cee45
Size

56KB
MD5

696857003e77a0b6a7fa6a36cc8a6c0f
SHA1

e283e3d6b21bce6ef774e252e312ceba4bcf482c
SHA256

df008ef240cb907df0d3d5f6c069400ffd788d701c2ded50a30e4d03c26cee45
SHA512

205f57465985b7dc4125b0317be4fed896a2751e522ff3ef147a4df3f72344592b63fc64b6c8d183f5a710f31cb54e0e0d177c456f8e3048adafcc9321149548
SSDEEP

1536:qBSND8fCXawl/nRyZWjCluusNvue/qroS2N0l:quD8f3m/Rz2r4Gl

Score

N/A

Malware Config

Signatures

Files

df008ef240cb907df0d3d5f6c069400ffd788d701c2ded50a30e4d03c26cee45
.exe windows x86

a28fe8a1483a28945d27c6b243e51f86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
lstrcat
MoveFileExW
ResumeThread
SetComPlusPackageInstallStatus
SetConsoleOutputCP
FormatMessageW
OutputDebugStringA
MoveFileWithProgressA
SetCriticalSectionSpinCount
DosPathToSessionPathA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE