d8233711bb42c2ea7e721350160452d075b9696d4a90b8feecaea50008348b27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8233711bb42c2ea7e721350160452d075b9696d4a90b8feecaea50008348b27
Size

820KB
MD5

8bd50859aec493bf2947c8cf3b3de57b
SHA1

6bb0f1bf9961e4345118417bf04a39a8236e834d
SHA256

d8233711bb42c2ea7e721350160452d075b9696d4a90b8feecaea50008348b27
SHA512

aa9a3c3028ccbf0f6bf8ab3aeda1fab359583d7f4a4229afd971ea8100add0d63bc94981d8715ba758f65773becec6cc536c23de2525c12cbecc45eaf208c5fb
SSDEEP

24576:BJhr3SPT8AVYtAThpytOA49DBC5M/GKEE9:BDr3SPTxYGThpq4t6Mf9

Score

N/A

Malware Config

Signatures

Files

d8233711bb42c2ea7e721350160452d075b9696d4a90b8feecaea50008348b27
.exe windows x86

bd2e1994c70b70b60a1634387245639b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
FindNextVolumeW
GetModuleHandleA
GetCurrentProcessId
GetTimeFormatA
CopyFileA
CreateMutexA
CreateEventA
GetStringTypeA
GetVolumePathNameA
InterlockedIncrement
CreateMailslotA
SetCurrentDirectoryW
DeleteFileA
GetPrivateProfileIntW
HeapCreate
lstrcatW
InterlockedDecrement

cryptui

WizardFree
CryptUIWizDigitalSign
CryptUIWizImport
CryptUIWizExport

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KDATA
Size: 804KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ