baf33d5c90218e5f02a12e5d373a365ffff5b7541532503190a863a337622e28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baf33d5c90218e5f02a12e5d373a365ffff5b7541532503190a863a337622e28
Size

832KB
MD5

08ec68ba31b325f0b55a579b7af7fdc1
SHA1

08de6997429e462414eaed3ab2f16738a93d0d4e
SHA256

baf33d5c90218e5f02a12e5d373a365ffff5b7541532503190a863a337622e28
SHA512

e941e229d422db0b8a749186d584d57cb7c4d00583d497f952f33681aa7d05dcd364066d56da5841987621a5a8a8c009377a29446911076c2ee801928a795d02
SSDEEP

24576:yvcUquSxMHM+bq6boMfRDzpB0MshcOk4pa:yEB6sGd5DFOVhZ

Score

N/A

Malware Config

Signatures

Files

baf33d5c90218e5f02a12e5d373a365ffff5b7541532503190a863a337622e28
.exe windows x86

fc2cfc04e6dfe99db993bc70d28b97f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
GetDriveTypeA
CreateDirectoryA
GetFileAttributesA
CopyFileA
FreeEnvironmentStringsW
VirtualAlloc
CreateFileMappingA
WriteConsoleA
GetEnvironmentStringsW
GetBinaryTypeW
GetDiskFreeSpaceW
SearchPathW
HeapAlloc
CompareStringA
CopyFileA
LoadLibraryA

msdtcprx

DTC_XaPrepare
DTC_XaOpen
DTC_XaStart
DTC_XaEnd

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ