11a944f211cbd25b8cea10c2b8db5a992a2652ab86de099d9cd0a7f383d0c049 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11a944f211cbd25b8cea10c2b8db5a992a2652ab86de099d9cd0a7f383d0c049
Size

832KB
MD5

83e73d881f4cf0d9b158abc67201e0e1
SHA1

a130ee4dd2a75d8e104b46d336cec93294e6f6e9
SHA256

11a944f211cbd25b8cea10c2b8db5a992a2652ab86de099d9cd0a7f383d0c049
SHA512

c99076c413cd57e662c91cb29e74553c79f04cd2d38808dbdf7717bd5f2ca8300b5a444f3e5fa3d6d49255fc630f8e1b539e73fd80c41f0e82c6564c20b8b183
SSDEEP

12288:Ev86z7wL/qmi515+kdSCCDNpmT9lWAUse6JwqMlIvBLo+w7T6aMF4U8D83Ayskj:EXnwjdeCjmCYIk1fw7PMFKIK

Score

N/A

Malware Config

Signatures

Files

11a944f211cbd25b8cea10c2b8db5a992a2652ab86de099d9cd0a7f383d0c049
.exe windows x86

1b614ea43dc82aab8b622ccd8f36fca4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
GetPrivateProfileStringA
GetEnvironmentVariableA
GetTimeFormatA
CopyFileA
CompareStringW
ReadConsoleW
CreateFileMappingW
LoadLibraryA
GetVolumeInformationA
WriteConsoleA
CreateDirectoryA
FreeEnvironmentStringsW
GetFileAttributesA
VirtualAlloc
HeapAlloc
CopyFileA

msdtcprx

DTC_XaStart
DTC_XaPrepare
DTC_XaForget
DTC_XaOpen

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ