7734d2beea7acff8ae75ed81bf27146de3ef248a81bf84bf7d8c931542f9f2af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7734d2beea7acff8ae75ed81bf27146de3ef248a81bf84bf7d8c931542f9f2af
Size

111KB
MD5

7771fa8e7847f57c2b88fa28fde08a48
SHA1

5551c5ea345e46b868da79acf1c50d26db277ef6
SHA256

7734d2beea7acff8ae75ed81bf27146de3ef248a81bf84bf7d8c931542f9f2af
SHA512

64e9f8d27087c8577928b1a9375759e5da4238aede4db46dde1045ed121e85b06bf80d4e9aa7fe5a5ea36093ee39c22e2c10d7a55f398d1d318520b8859b645c
SSDEEP

3072:IPK0Z5rThXhsGRm0GKebQ63YAu5ZwNhLlj:Iy0zTtE0JerYAu5ZShh

Score

N/A

Malware Config

Signatures

Files

7734d2beea7acff8ae75ed81bf27146de3ef248a81bf84bf7d8c931542f9f2af
.exe windows x86

f07c0b92622fcb014ccd9ed4866bdb2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFileW
LeaveCriticalSection
OpenFileMappingA
FindNextVolumeA
LZClose
BackupWrite
GetConsoleAliasesA
ContinueDebugEvent
GetTapePosition
LZClose
GetThreadLocale
GetNextVDMCommand

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 97KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cduupqo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE