b638344d6ee095255b4e1ed488d56082b3516db06f5661359612bd715dfa3310 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b638344d6ee095255b4e1ed488d56082b3516db06f5661359612bd715dfa3310
Size

831KB
MD5

3e4e41548c3e62e4667937f7b83e3516
SHA1

ac53a3b6aae430166ca6d2441a9d32d6c5619bcd
SHA256

b638344d6ee095255b4e1ed488d56082b3516db06f5661359612bd715dfa3310
SHA512

e8582815e8506c9a447f2384d15a6937a65e25c305034452cb2558941025decb2a2831ceb6a0ec8b12880ca8ebf09837869990945a334231f7c8eabee25b408a
SSDEEP

12288:5dKBtDwTM3YQg+D6MfFSkPOqAkP8hsOwg2BRrL/tCNlOOCDmY1n4PiQxwCesDeD0:rUmonJzdPPrLPQoElLCDXkOYJYy

Score

N/A

Malware Config

Signatures

Files

b638344d6ee095255b4e1ed488d56082b3516db06f5661359612bd715dfa3310
.exe windows x86

409bbf33c1b7f0be264819b57f1aa491

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
FreeEnvironmentStringsW
LoadLibraryA
HeapAlloc
GetDriveTypeA
WriteConsoleA
CreateDirectoryA
CreateFileMappingW
GetEnvironmentVariableA
GetFileAttributesA
CompareStringW
VirtualAlloc
ReadConsoleW
CopyFileA
GetTimeFormatA
GetPrivateProfileStringA
GetVolumeInformationA

msdtcuiu

DtcPerfCollect
DtcPerfOpen
DtcPerfClose
PerfDllRegisterServer

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 812KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE