d4c2e63d00dd292f1952a1c23e00649481bed574860a32e18b239818bb2bc653 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4c2e63d00dd292f1952a1c23e00649481bed574860a32e18b239818bb2bc653
Size

810KB
MD5

4a00d1b9af3855da546d1f36c8cd4c10
SHA1

615db41ed6acd71e430bc53c1b9637ae141524ce
SHA256

d4c2e63d00dd292f1952a1c23e00649481bed574860a32e18b239818bb2bc653
SHA512

8c2ced3cd86f60d6f523395098a790b40e2410eb315c3a03e85353dd1abf8eec3c4e972837f867b143b023c5c4209c5145e36aba131712e7af156154890683a9
SSDEEP

12288:FAE75CYNc0nKqZ4lXOm0Rx5FzNTvozcPfyxLw4GiaFVkF1cNAwyp9BOpk43O:FB75C2R4leFRNNkzxBG5I1AARIK43

Score

N/A

Malware Config

Signatures

Files

d4c2e63d00dd292f1952a1c23e00649481bed574860a32e18b239818bb2bc653
.exe windows x86

bfca6ac4001b3051c0d52016b52b3a24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileW
GetModuleHandleA
LoadLibraryExA
SetLastError
VirtualProtectEx
CreateSemaphoreW
GetLogicalDriveStringsA
SetLastError
SetLastError
OpenMutexA
SetLastError
SetLastError
SetLastError
SetCurrentDirectoryA
GetFullPathNameW
lstrcpyA

rasdlg

RasDialDlgA
DwTerminalDlg
RasEntryDlgA
RasSrvEnumConnections

Sections

.code
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.udata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.gdata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ