4e49c4910dcddf86e19602192d776627031d7c92b2bfa489de6f10aed96ed32e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e49c4910dcddf86e19602192d776627031d7c92b2bfa489de6f10aed96ed32e
Size

29KB
MD5

0c59863f81d9cf55e3b36e8d23d82760
SHA1

b56ac05ce6f5c24c5575883899b182d21a6f2988
SHA256

4e49c4910dcddf86e19602192d776627031d7c92b2bfa489de6f10aed96ed32e
SHA512

2128d24d89bec3de260103219610919405c7ec46659d2a491d048b33c02863256978b1c14bd7a91f3cc7d7b1904116dab0efb8e5087b86c7857bf6aa3314b414
SSDEEP

384:GyXIvgAFm7Ex7b08w2bKvzPSjR627MhhB9t5fJ3DfXVkHWjSDh3SEyK6ut5q3x0:q0jpZXy2jS93yKJtgB

Score

N/A

Malware Config

Signatures

Files

4e49c4910dcddf86e19602192d776627031d7c92b2bfa489de6f10aed96ed32e
.exe windows x86

ee96a460d48adedde0e47b8c0766b016

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
CopyFileA
GetBinaryTypeW
HeapCreate
GetModuleHandleA
GetFileAttributesA
SearchPathW
CompareStringA
HeapAlloc
CreateFileMappingA
CreateDirectoryA
WriteConsoleA
GetDriveTypeA
GetEnvironmentStringsW
CopyFileA
FreeEnvironmentStringsA
GetDiskFreeSpaceW

msdtcprx

DTC_XaPrepare
DTC_XaEnd
DTC_XaOpen
DTC_XaStart

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ