04abf261675ae296229cf0c41d102e3797d926208cd6fca6d4227daebd6f08d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04abf261675ae296229cf0c41d102e3797d926208cd6fca6d4227daebd6f08d6
Size

826KB
MD5

18cda704c0750d2b4e29568a703ec0b1
SHA1

8a5d8efec35e066b4d6122b075540251a3266df7
SHA256

04abf261675ae296229cf0c41d102e3797d926208cd6fca6d4227daebd6f08d6
SHA512

fbc41fe3e13f9bf74594306d2dda14c035d85da6b1c967f3074e13c127c9fcb0e65db1c871fee6e1d9f45f9e57d93af6bb3751fb7913377d807051460383fa92
SSDEEP

24576:3mghiKoYrKgNj1y1WgRq1eOkT7j1Sckui:2gdXKAMNU4b72u

Score

N/A

Malware Config

Signatures

Files

04abf261675ae296229cf0c41d102e3797d926208cd6fca6d4227daebd6f08d6
.exe windows x86

6820e4540f181cdaca0c287e328c56f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetVersion
GetStringTypeW
ReplaceFileW
HeapCreate
GetBinaryTypeW
GetNumberFormatA
GetLongPathNameW
WriteConsoleW
GetStartupInfoW
IsBadStringPtrA
CreateSemaphoreA
MoveFileA
CopyFileExW
GetModuleHandleA
SetCurrentDirectoryW
GetCurrentThreadId
EnumCalendarInfoA

dbnetlib

ConnectionRead
ConnectionWrite
TermSession
InitSession

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.edata
Size: 809KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ