a79f488038135524913357c6c2c304f47bdecbbc2ce0fc3547bf9f01552a0516 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a79f488038135524913357c6c2c304f47bdecbbc2ce0fc3547bf9f01552a0516
Size

111KB
MD5

11400ff00e0d1b48739478f0684cce10
SHA1

00389f87937e7da53773699022dd21696fd9d6cc
SHA256

a79f488038135524913357c6c2c304f47bdecbbc2ce0fc3547bf9f01552a0516
SHA512

4377aeabf72349f2bb9be340a552554c2d0e384acbe2348f20698cf0ff3bc0d092f254a28adc3a8a08addd16b9f134bfdfb07d330e0b564dbb42251c05db6b40
SSDEEP

3072:JxvwRSBH9OaDi3RtsrghK/Hs2qpP8Lpfk:3YRSzDiBtzQOULpM

Score

N/A

Malware Config

Signatures

Files

a79f488038135524913357c6c2c304f47bdecbbc2ce0fc3547bf9f01552a0516
.exe windows x86

3e96198dbf54b2d39ad7b353169b908f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
BuildCommDCBW
FatalExit
InterlockedPushEntrySList
GetNativeSystemInfo
CreateDirectoryExA
GetComPlusPackageInstallStatus
MultiByteToWideChar
LocalReAlloc
CopyFileA
FindNextFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE