30206c3158935ef00fb25b986988e9d5dfba3efb5f51b0344728656a19e92cd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30206c3158935ef00fb25b986988e9d5dfba3efb5f51b0344728656a19e92cd1
Size

817KB
MD5

350979e5d8936d96272483e5eda77fd0
SHA1

b8c4d4e2e451b9a9cd89e8738247267b43b4ec9e
SHA256

30206c3158935ef00fb25b986988e9d5dfba3efb5f51b0344728656a19e92cd1
SHA512

8b9a883220730aadb87ace16d7d94d731b46cb0d4d56862dee9f11137c5e4405389d2b1a75699186bf6e180121e01d8d33cd45d0aa21b1a89746c1e8c1c4e3bf
SSDEEP

24576:xq8k0Jo3brq3/BqoS2mSmoWB/WY9LzTs:JGPUJmoc5c

Score

N/A

Malware Config

Signatures

Files

30206c3158935ef00fb25b986988e9d5dfba3efb5f51b0344728656a19e92cd1
.exe windows x86

8e336cb2bba83e2af6af76865e58feda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualFree
DeleteFileW
TlsGetValue
GetLocaleInfoW
GetModuleHandleA
GetCurrentThread
GetModuleFileNameW
GetFullPathNameW
FormatMessageA
GetStringTypeW
WriteConsoleA
TlsFree
GetPrivateProfileIntA
SetCurrentDirectoryW
CreateEventW
VirtualProtectEx
lstrcpynW
GetCommandLineA
lstrlenA

wmadmod

DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer

Sections

.text
Size: 13KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.udata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ