9947dc63dc4bf389f7a5c2cf6761ae1661f6bc0efd5fec9b2957c8d859ac00cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9947dc63dc4bf389f7a5c2cf6761ae1661f6bc0efd5fec9b2957c8d859ac00cf
Size

822KB
MD5

eeb2b56ef78aef57ad7d009b41ab943d
SHA1

2cc16632e82ab898d2a80b15faf60faf107fa14d
SHA256

9947dc63dc4bf389f7a5c2cf6761ae1661f6bc0efd5fec9b2957c8d859ac00cf
SHA512

f17b31ace832a87cde3a285268683a4f2870033049ad40bb0afb82f2ed9acc9061100d78345f18d4b627abe1f191f29dfbea5de87761c96d38b963687741eb12
SSDEEP

24576:O0yk7yZXH7dD6wzmNjV6pJPdwIJeElD9TqZ0O/:OkGZXbt6Y8splOIdDwGO

Score

N/A

Malware Config

Signatures

Files

9947dc63dc4bf389f7a5c2cf6761ae1661f6bc0efd5fec9b2957c8d859ac00cf
.exe windows x86

246e9282b2bb99f1d2131b062d4b2f9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
DeleteFileW
GetModuleFileNameW
GetVolumeInformationA
GetModuleHandleA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
GetDriveTypeA
lstrlenA
GetCurrentDirectoryW
GetDriveTypeA
FindResourceA
GetFileAttributesW
IsBadStringPtrW
VirtualAlloc

msxml3

DllMain
DllRegisterServer
DllCanUnloadNow
DllGetClassObject

Sections

.play
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.wdata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ