1415b0897c067687595c0734dd811157c7e8e1b70772bb0632347fb9c7cafd3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1415b0897c067687595c0734dd811157c7e8e1b70772bb0632347fb9c7cafd3b
Size

810KB
MD5

0d1a3add74670197f202145fc7572df6
SHA1

cc07f5299d10a0fab698d00b5897b0b1b4a23d91
SHA256

1415b0897c067687595c0734dd811157c7e8e1b70772bb0632347fb9c7cafd3b
SHA512

3ac9e73405603442ca99314a63a3aec8daa2a369aef8516a8b3e426fc7585bf24de0a162bf209b2422bbfed3ed3aa052f3654513f3a51fe60407f4145819e8f1
SSDEEP

12288:cEbRFSaLBktQawvULg2j8PyxtXad0Czz86QfA1Hb5scWHHkkMlFFHidL5TruT8Ej:cEJLBktQLvULlYKaRzHsA1HNsGNHu

Score

N/A

Malware Config

Signatures

Files

1415b0897c067687595c0734dd811157c7e8e1b70772bb0632347fb9c7cafd3b
.exe windows x86

9098220b9ae17a495f3c4285a29484c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrcpyW
GetStdHandle
SetCurrentDirectoryW
GetLogicalDrives
VirtualProtectEx
GetLogicalDrives
CreateEventA
GetStringTypeA
GetLogicalDrives
OpenMutexW
GetLogicalDriveStringsW
GetTickCount
GetFileAttributesA
GetLogicalDrives
GetModuleHandleW

riched20

IID_ITextHost
IID_IRichEditOle
RichEditANSIWndProc
RichEdit10ANSIWndProc

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.kdata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ