a1b940a65426cb571284a7fc9181824bda182d2b7d42b67cfbdb063ba8fdd3c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1b940a65426cb571284a7fc9181824bda182d2b7d42b67cfbdb063ba8fdd3c3
Size

816KB
MD5

0d0eb74f371be86f4ac2f4e6a824f4b6
SHA1

d94f76b57253f6fe4d34b4470ca4ff20ca3de3f3
SHA256

a1b940a65426cb571284a7fc9181824bda182d2b7d42b67cfbdb063ba8fdd3c3
SHA512

5c273a21c6fb624c7517fdd7f2add944e7fe2a3de8e639ca342a61343068587394c5eb81e0ce75bdd28e375af12d03abf15a8f306067d7e4d951211599a69bd7
SSDEEP

24576:quFiKNGNA5+ACaikrAIg+1uaa+DYPVPxApaaO:Pl2q+A71AIgIuCidR

Score

N/A

Malware Config

Signatures

Files

a1b940a65426cb571284a7fc9181824bda182d2b7d42b67cfbdb063ba8fdd3c3
.exe windows x86

a2fc82a6aca0644f8a8e202d863aa25d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
LoadLibraryA
VirtualAlloc
GetDriveTypeW
lstrlenA
GetDriveTypeW
GetVolumePathNameA
GetCurrentDirectoryW
OpenMutexA
GetDriveTypeW
GetFileSize
MoveFileA
GetDriveTypeW
GetDriveTypeW
GetDriveTypeW
FindResourceW
GetDriveTypeW

netshell

HrGetIconFromMediaType
HrCreateDesktopIcon
HrRenameConnection
HrLaunchConnection

Sections

.play
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.ydata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ