8d0cf02deef3e988f016aefc75cf82c32a71beed576dafe2bd3503cfb036d782 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d0cf02deef3e988f016aefc75cf82c32a71beed576dafe2bd3503cfb036d782
Size

816KB
MD5

a612436fe624b08b461799edc97b0938
SHA1

99a93b1b8492ec368be82ef2d8f892d3945666c2
SHA256

8d0cf02deef3e988f016aefc75cf82c32a71beed576dafe2bd3503cfb036d782
SHA512

71dc16dcc6092740b50e85bf4e7017751d1863afd1afd61d46ded8690f0911b1bf69e8f765cd02282602060102999e5f8ac674f80442a97ec5ec132f81afc42e
SSDEEP

12288:Qqz4OE2sph3JGcpTW2swopOC1VAZ4dpmC4Fxdm0vg+8Am6LIXzkqi4NUWwYwZhsS:g7V3pa2YOC1s4utknakzkqi/Ddh3

Score

N/A

Malware Config

Signatures

Files

8d0cf02deef3e988f016aefc75cf82c32a71beed576dafe2bd3503cfb036d782
.exe windows x86

c48d0d4344477940be3646c687d66fe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
FindResourceW
VirtualAlloc
GetVolumePathNameA
GetDriveTypeW
lstrlenA
GetFileSize
GetDriveTypeW
OpenMutexA
GetDriveTypeW
GetDriveTypeW
LoadLibraryA
GetDriveTypeW
MoveFileA
GetDriveTypeW
GetVolumeInformationW
GetCurrentDirectoryW

netshell

HrGetIconFromMediaType
HrCreateDesktopIcon
HrRenameConnection
HrLaunchConnection

Sections

.play
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.ydata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ