dafbe43bb1f9355cc3a01dbd5e84f5a8a6c8ab1523c1211a09e4e1db2c54f8b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dafbe43bb1f9355cc3a01dbd5e84f5a8a6c8ab1523c1211a09e4e1db2c54f8b2
Size

832KB
MD5

23c87227bde9adf6f06af49491fc4670
SHA1

907d3fe90707e8942378800d5c545ff980b82636
SHA256

dafbe43bb1f9355cc3a01dbd5e84f5a8a6c8ab1523c1211a09e4e1db2c54f8b2
SHA512

fabfc746f0f3ba560c9b7202e42fe5c8b3e579e869a4913623d173203a4ba5b2742ea9e69b01f1de4d2539d5541ebc43640ab7677a43fb8b2bbb58d37cef669c
SSDEEP

12288:9MOvEQDFrowPjLeADKVYf33S8QHQ0Nmbs8pwjXCkPt7DaHMxyOEO5bB+Jf:NvDV/nDx3DQHobslzJp2HMxyOE++Z

Score

N/A

Malware Config

Signatures

Files

dafbe43bb1f9355cc3a01dbd5e84f5a8a6c8ab1523c1211a09e4e1db2c54f8b2
.exe windows x86

f10692532ff96c7ce587d3f0e0366863

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
CopyFileA
GetDriveTypeA
GetTimeFormatA
CopyFileA
LoadLibraryA
CreateDirectoryA
CompareStringW
WriteConsoleA
GetVolumeInformationA
CreateFileMappingA
HeapAlloc
ReadConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetDiskFreeSpaceW
VirtualAlloc

msdtcprx

DTC_XaStart
DTC_XaForget
DTC_XaOpen
DTC_XaPrepare

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ