64579c2376f3bf9f6f59993d14e05cbdd8a833e95ff99352c72e05d4ff7d1d29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64579c2376f3bf9f6f59993d14e05cbdd8a833e95ff99352c72e05d4ff7d1d29
Size

831KB
MD5

3cebdaa2af6445aa049e159e9b4270d1
SHA1

b4e6cdb6a12530fb5ca68feee2a3309042a61304
SHA256

64579c2376f3bf9f6f59993d14e05cbdd8a833e95ff99352c72e05d4ff7d1d29
SHA512

839aeb7e78520b0ba16fbc7d29bd7c7d87df7395290d82b1975a2a28e164e544fb7b4af9b0725c0740a554ce6dddfccf0adb50314c1aee42281e2a895e707e5a
SSDEEP

12288:mOeA2194SzhS8b6bUfQI4O5zecTQqob1Ay4XZ4nFs9/YA/i91OO0rKD6GtTVpEI:lf2194S08b6bg/McTPZpZ63y2TBz

Score

N/A

Malware Config

Signatures

Files

64579c2376f3bf9f6f59993d14e05cbdd8a833e95ff99352c72e05d4ff7d1d29
.exe windows x86

3141374075d492323a08afdfeffabdfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

MoveFileExA
GetStdHandle
ResumeThread
OpenMutexA
GetCurrentProcess
GetModuleHandleA
GetFullPathNameA
GetDiskFreeSpaceA
WaitForSingleObject
HeapCreate
CreateEventA
GetLocaleInfoW
GetCommandLineA
GetConsoleAliasA
CompareStringW
EnumCalendarInfoW
CreateSemaphoreW

hnetcfg

HNetGetFirewallSettingsPage
HNetFreeSharingServicesPage
HNetGetSharingServicesPage
HNetDeleteRasConnection

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_WRITE

.adata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ