3638d23deaf4f9d7102fb9b4b4eb7e2a18151b7aa3b235274e9bc128922e102e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3638d23deaf4f9d7102fb9b4b4eb7e2a18151b7aa3b235274e9bc128922e102e
Size

73KB
MD5

f17ebc8c46b9302dd9852c44e484a7c7
SHA1

e11c37b2c9ee08e9923f88d22ca211736c179ed0
SHA256

3638d23deaf4f9d7102fb9b4b4eb7e2a18151b7aa3b235274e9bc128922e102e
SHA512

3934803de43fa9a91c362e120428bb931225e5521cd70815712228fcce52bd5acec030ca3cb6d0265e4cb08844c04e4d82cd079c28c9369701660e15189e8a0d
SSDEEP

1536:K4t+HTLb2ZCldOZMdr9MRe6QAU5N3U/yIglSIFZqujUpmx1iacrMrQ:K4ta/ldxrWxWFU/lOjUCDQ

Score

N/A

Malware Config

Signatures

Files

3638d23deaf4f9d7102fb9b4b4eb7e2a18151b7aa3b235274e9bc128922e102e
.exe windows x86

0f5b11150f848c63fbbc44a4750b2df9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeMountPointA
GetVersionExW
FindNextVolumeW
GetNumberOfConsoleInputEvents
FatalExit
GetCurrentDirectoryA
GetConsoleProcessList
RtlZeroMemory
MoveFileW
CopyFileExA
LocalCompact

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 58KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE