d2cf4244564cb73cec45060698ca302a2041dd672bd58c149cfcf4b8e946b88f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2cf4244564cb73cec45060698ca302a2041dd672bd58c149cfcf4b8e946b88f
Size

320KB
MD5

a38b8906e2c99c8510e3f469559ce090
SHA1

c97bcec94cf4cc0396770ab6a8822da6354cd639
SHA256

d2cf4244564cb73cec45060698ca302a2041dd672bd58c149cfcf4b8e946b88f
SHA512

030ba43f7b50eecb9417fcae030405d483413c808e36f39e53fdc03661154a606ba9aacc746efe9acd628228a6f62ece5d476f241d93c86c7be715c715584c5b
SSDEEP

6144:H9IawTvuVWKfH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:HjavuP2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

d2cf4244564cb73cec45060698ca302a2041dd672bd58c149cfcf4b8e946b88f
.exe windows x86

284a5d324d90c77d047161bdaf954667

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CreateEventW
BeginUpdateResourceA
SetSystemTime
GetEnvironmentVariableW
GetDiskFreeSpaceA
GlobalDeleteAtom
GetFileInformationByHandle
GetVolumePathNamesForVolumeNameA
DecodeSystemPointer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE