5ce6331ee99d6a9b1600477d84b64f08f4f11524a8a33d189184aa0495582fd0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ce6331ee99d6a9b1600477d84b64f08f4f11524a8a33d189184aa0495582fd0
Size

821KB
MD5

09ee6bdb9b3d2d82c407c37dcf8c6ab0
SHA1

6036640c56fc7b142e2e03b7ed65bd82e91607f6
SHA256

5ce6331ee99d6a9b1600477d84b64f08f4f11524a8a33d189184aa0495582fd0
SHA512

9724f021b5d38bba2e3bed03abb066c55b32685541327bb5e529d47445f96dafb36152238fa2d8dce304a0a5f2fb024c24828f1c5cc5a472bda313e449c1db14
SSDEEP

24576:yF+fa7lbxkTELv6RZbLtfVSXkxSWsi6nM2adwIT:Klblvst9IXFJvnMdwI

Score

N/A

Malware Config

Signatures

Files

5ce6331ee99d6a9b1600477d84b64f08f4f11524a8a33d189184aa0495582fd0
.exe windows x86

97e7c1af985a6b782226453fb79487a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
GetDriveTypeW
GetDriveTypeW
GetDriveTypeW
GetVolumeInformationA
GetDriveTypeW
lstrlenA
GetDriveTypeW
GetDriveTypeW
GetCurrentDirectoryW
GetModuleHandleA
DeleteFileW
IsBadStringPtrW
GetModuleFileNameW
GetFileSize
FindResourceA
VirtualAlloc

msxml3

DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllMain

Sections

.play
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.gdata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ