0311d67ab5e31e3803833075c6998051b48286005d159c17cec94e34b13290ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0311d67ab5e31e3803833075c6998051b48286005d159c17cec94e34b13290ff
Size

831KB
MD5

57516ac893870ca89cd026afe1c39266
SHA1

f3c4e6f52e5ab790825cf4e593977e787521a5ad
SHA256

0311d67ab5e31e3803833075c6998051b48286005d159c17cec94e34b13290ff
SHA512

2a204f759a3e52dfd976ff5d544a9e04585ba4cbaacc2aab948c1da781acd1f169c61694cfcf29c96d550fb56ba65207204b8492552a3e72c9bea920f22965b6
SSDEEP

12288:946+IGP8vPic1EeO2UI2C/c2NEsdZC2HL+NGS8aDmueELHjlq1IbqmNKc0PiT:i6+SEYUbP29xdSJteELDlq9mNZ0Pa

Score

N/A

Malware Config

Signatures

Files

0311d67ab5e31e3803833075c6998051b48286005d159c17cec94e34b13290ff
.exe windows x86

3c8eb80a6f8521c5cae8df6af4fd4393

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
GetTimeFormatA
LoadLibraryA
HeapAlloc
CreateFileMappingW
CreateDirectoryA
GetPrivateProfileStringA
CopyFileA
FreeEnvironmentStringsW
ReadConsoleW
VirtualAlloc
GetFileAttributesA
GetEnvironmentVariableA
GetDriveTypeA
CompareStringW
GetVolumeInformationA
WriteConsoleA

msdtcprx

DTC_XaPrepare
DTC_XaForget
DTC_XaStart
DTC_XaOpen

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 812KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ