134b085a52766ce84b80bfcfaae000b0ffd434f659cde5bb05f458a6c393bce8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

134b085a52766ce84b80bfcfaae000b0ffd434f659cde5bb05f458a6c393bce8
Size

810KB
MD5

09bae46ff548496fecda8e43ab667e70
SHA1

c66f91505bab67b998980a8aec4fec9f42b3992e
SHA256

134b085a52766ce84b80bfcfaae000b0ffd434f659cde5bb05f458a6c393bce8
SHA512

76ea611c2f92a0c3389ca0c872896add4a832a3e79f574713876740dd2477eeb3cfdac09f9e5d4711e8eb903a52e00bf0ed205e2ddef18f9e4ae79b0afbd1ee6
SSDEEP

24576:YR7kpr9YNeBLJqZasjHE5x9LIkxw6XSx:YR0r9M2LJq8sjHYxNIkxw6C

Score

N/A

Malware Config

Signatures

Files

134b085a52766ce84b80bfcfaae000b0ffd434f659cde5bb05f458a6c393bce8
.exe windows x86

8935716474d39455a437cba86b6cd415

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
SetLastError
GetTickCount
lstrcpyA
SetLastError
CreateSemaphoreW
GetModuleHandleA
MoveFileW
VirtualProtectEx
SetLastError
GetLogicalDriveStringsW
SetLastError
OpenMutexA
SetLastError
SetLastError
GetFullPathNameW

riched20

IID_IRichEditOle
RichEdit10ANSIWndProc
IID_ITextHost
RichEditANSIWndProc

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.ndata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ