9249f26a98aee9c63f0b973acff7ee735ef5f162f72817c2ddc9efd78fffcae5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9249f26a98aee9c63f0b973acff7ee735ef5f162f72817c2ddc9efd78fffcae5
Size

821KB
MD5

0e45555fcf02cdec5c5e3b5efdbbba31
SHA1

cf5e8890ce9c59d975726586e1d9568706ca7b56
SHA256

9249f26a98aee9c63f0b973acff7ee735ef5f162f72817c2ddc9efd78fffcae5
SHA512

71caf6049b6d8b8c9b54754d19be86474fd44aff7dbea063e3ed55d1c3b50c84c3d3feeb071c868076565d903aa207a37c9b45d98eba2ae5d00bb642e4c0ce03
SSDEEP

24576:0O18posAULUf+MoqIX0ucpf3We1REiBu:0/PooRQZGe1REV

Score

N/A

Malware Config

Signatures

Files

9249f26a98aee9c63f0b973acff7ee735ef5f162f72817c2ddc9efd78fffcae5
.exe windows x86

4b0c420fb5741f50b8f81726305323b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
GetDriveTypeW
GetDriveTypeW
GetCurrentDirectoryW
FindResourceA
GetFileSize
GetDriveTypeW
VirtualAlloc
GetVolumeInformationA
IsBadStringPtrW
GetDriveTypeW
GetModuleHandleA
lstrlenA
GetModuleFileNameW
DeleteFileW
GetDriveTypeW
GetDriveTypeW

msxml3

DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllMain

Sections

.play
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.gdata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ