224105446f061e4b18fa99d3ed527310a54607c1c71dad3ee5705b5d4b40f2f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

224105446f061e4b18fa99d3ed527310a54607c1c71dad3ee5705b5d4b40f2f8
Size

119KB
MD5

0778e15c142584e4e17eef81d0bc48f0
SHA1

8f15837a5e07f2237fb4621f69e8be08a82cd9ec
SHA256

224105446f061e4b18fa99d3ed527310a54607c1c71dad3ee5705b5d4b40f2f8
SHA512

9f74bb19c3c020264a4192934066fdf774e1f7898d7bfb8afbc7c4190a34e8d9c081f2c49fe72e317540b592a5fd04d2e7a4ec99177bc37c2a1ed8cfa11e9ef5
SSDEEP

1536:3JdPvxSQYEOvEAeaZ1YOBlnPBkJPsBI6GkZGSupKPWhhGnjYbQpjVrs2ryrd1vU1:j+RYONkJPs6kZRkxCjYcHs2qxnC

Score

N/A

Malware Config

Signatures

Files

224105446f061e4b18fa99d3ed527310a54607c1c71dad3ee5705b5d4b40f2f8
.exe windows x86

395c090fe2b9e256409a63f637cef38b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeExW
SetConsoleCP
CreateRemoteThread
ReplaceFile
GetDiskFreeSpaceExA
GetConsoleCommandHistoryLengthA
MoveFileWithProgressW
GetVolumePathNamesForVolumeNameA
SetComPlusPackageInstallStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE