94e95ba417a066eeda7eddda8e69c53d144645ca967b979d827d030c974e1cf1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94e95ba417a066eeda7eddda8e69c53d144645ca967b979d827d030c974e1cf1
Size

832KB
MD5

0444ed12829a35a6981bc5208779b626
SHA1

bf7c7128b0315229d67b4e767b4ebe8e0f16bd3e
SHA256

94e95ba417a066eeda7eddda8e69c53d144645ca967b979d827d030c974e1cf1
SHA512

5d8944256a6b9ebeb82d055c26e9f34b394725f8f9ffd28345a55505c6480be25f643670a58231bc111f0073c1354a1c6a9e29d9000613ebb557515f69a8f7c8
SSDEEP

24576:SAFNFoIR/JGNO5D8e3Tww7UOpY5KMrkFI:ZWRaD8eD9o5rrkO

Score

N/A

Malware Config

Signatures

Files

94e95ba417a066eeda7eddda8e69c53d144645ca967b979d827d030c974e1cf1
.exe windows x86

0a4ffbcd6d8ba8a991ec7babc53587bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
GetEnvironmentStringsW
CopyFileA
GetDiskFreeSpaceW
HeapAlloc
LoadLibraryA
ReadConsoleA
CopyFileA
FreeEnvironmentStringsW
WriteConsoleA
GetVolumeInformationA
VirtualAlloc
CreateDirectoryA
CompareStringW
GetFileAttributesA
CreateFileMappingA
GetDriveTypeA

msdtcprx

DTC_XaStart
DTC_XaPrepare
DTC_XaEnd
DTC_XaOpen

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ