288de02ba30eb17d3e4033b27368eac80517300bbac56dcb93938061730970f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

288de02ba30eb17d3e4033b27368eac80517300bbac56dcb93938061730970f6
Size

810KB
MD5

2b1fb6b7a2e3466353b91d6c242f7980
SHA1

2fcd3d6fa44f42e91652ae93c610683419f54d8e
SHA256

288de02ba30eb17d3e4033b27368eac80517300bbac56dcb93938061730970f6
SHA512

1e03e3a6ba6a2076c79c454ec9dc689b85e8c59f9028911690be3e33fc3af23d1b6e9f6e3156019c1a6c4a13e72eb846b52a446f6fd53637263d948eb1e782de
SSDEEP

12288:dReH9LTPPYKZiId5ZT+9ZEB5YHnKLddgZzTE6QNu964xCEhNntIioO8g/52blb4:6HRTjiId5vsKZdCEexR1IioO8g/k

Score

N/A

Malware Config

Signatures

Files

288de02ba30eb17d3e4033b27368eac80517300bbac56dcb93938061730970f6
.exe windows x86

e697f0bf6d43df18f011c59b548451d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtectEx
GetLogicalDriveStringsW
OpenMutexW
lstrcpyW
GetLogicalDrives
GetModuleHandleW
SetCurrentDirectoryW
GetModuleHandleA
GetTickCount
GetLogicalDrives
GetStdHandle
GetStringTypeA
GetLogicalDrives
GetLogicalDrives
GetFileAttributesA
CreateEventA

riched20

IID_IRichEditOle
RichEdit10ANSIWndProc
IID_ITextHost
RichEditANSIWndProc

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.kdata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ