df97c2813196deae9222e27b59deebb8be89686419e6c5dad0bac49b19c62a62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df97c2813196deae9222e27b59deebb8be89686419e6c5dad0bac49b19c62a62
Size

811KB
MD5

929f2508d9a66dc44b8601d3ac2a80a6
SHA1

8371ed35865ab6a5156e634a1705c8d8d57671dc
SHA256

df97c2813196deae9222e27b59deebb8be89686419e6c5dad0bac49b19c62a62
SHA512

05175c42ea5ab35d00e158fe6bed859f2bcf8b338c46273e603f362bd60d1d661dd5864844b362fc91bd284630759848ad59078f23ac24d185f5850d3e0770ca
SSDEEP

24576:Ac93R9x532GvT1Z/NEcCBkXsdCjWFiH6GBd:AcP9x5jT1TgTCjxHn

Score

N/A

Malware Config

Signatures

Files

df97c2813196deae9222e27b59deebb8be89686419e6c5dad0bac49b19c62a62
.exe windows x86

6f9bddee6d8df2ae25f8c8b4a2c94caf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLogicalDriveStringsW
SetEndOfFile
LoadLibraryA
GetStdHandle
GetVersion
SetEndOfFile
SetEndOfFile
CreateEventA
SetEndOfFile
SetEndOfFile
VirtualProtectEx
GetStringTypeW
SetCurrentDirectoryW
GetFileAttributesA
OpenMutexW
lstrcpyW

vbscript

DllRegisterServer
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 802KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE