25e346a7b3f7f84a3a3fec2f787c5d292f406d6bf942fe79e0b24450263f12c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25e346a7b3f7f84a3a3fec2f787c5d292f406d6bf942fe79e0b24450263f12c9
Size

111KB
MD5

830a549f60f59476f41e87065539885d
SHA1

5695529eefac2484a37e7ac27e6fd4354b44fd8a
SHA256

25e346a7b3f7f84a3a3fec2f787c5d292f406d6bf942fe79e0b24450263f12c9
SHA512

5d4f365c634fce5552d9107a5960c70e471d4515780e58ba3628a4c56b6ffa5320ea6fefc3c85d26df53b7bcad135913e552ab9e442eb693bd78a30be0675b2a
SSDEEP

3072:at05bFLQu9mZAAJ7aWevseVMJheR9RWEBvguGoKhuYRAi8:aybFcrAAJ7aXVWyXfZguheVq

Score

N/A

Malware Config

Signatures

Files

25e346a7b3f7f84a3a3fec2f787c5d292f406d6bf942fe79e0b24450263f12c9
.exe windows x86

bbeda5acd24b4539ed1c1bfdff7a7011

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointA
GetTapeParameters
GetDiskFreeSpaceA
WriteConsoleOutputAttribute
SetCommMask
EraseTape
DeleteVolumeMountPointA
GetLongPathNameW
Process32First
ReadConsoleInputExA
GetVolumeNameForVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 97KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cduupqo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE