af6db0142701f6d4d83803eeecf0a1632644476e68067dec5269aadaedf31076 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af6db0142701f6d4d83803eeecf0a1632644476e68067dec5269aadaedf31076
Size

307KB
MD5

49e54e4f0bf4b7b430863fdb81a6c239
SHA1

09977bc98ceff24790b880032475d9557cbccbc0
SHA256

af6db0142701f6d4d83803eeecf0a1632644476e68067dec5269aadaedf31076
SHA512

3f18b8dea6ce01bcab36f9b33384f4f1c0bc45583488ead5785930d8b2f83bb34d2a0a5f573950f171b2db9cc373d53736866eeba705c9ef313fa7bc3b8e86f3
SSDEEP

6144:CzVcwo30d482/QZewDZHwcELb4PSnTPzTssiWuHoiKlG0XckrxD:wcwoA2/iZQcNSnos/uHeU0

Score

N/A

Malware Config

Signatures

Files

af6db0142701f6d4d83803eeecf0a1632644476e68067dec5269aadaedf31076
.exe windows x86

bc409e480efd4858fa5b7ad754750b35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
GetLocaleInfoW
GetPrivateProfileIntA
lstrcpynA
DeleteFileW
GetNumberFormatW
GetModuleFileNameW
lstrcpynA
GetFullPathNameA
TlsGetValue
GetCurrentThread
TlsAlloc
CreateEventA
lstrcpynA
GetStartupInfoW
lstrcpynA
UnmapViewOfFile
lstrlenA
lstrcpynA
FormatMessageA
SetCurrentDirectoryA
TlsAlloc
GetModuleHandleA

wavemsp

DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.rdata
Size: 289KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE