3950f718470c2ab758fe125db1f733b637377093140fa0f1a6b85c14ef9866ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3950f718470c2ab758fe125db1f733b637377093140fa0f1a6b85c14ef9866ca
Size

815KB
MD5

cf520dfac79fee9ba90503d8a52002ec
SHA1

bcb6d546e38bd7b20b7188bfbd1a7a842dbef855
SHA256

3950f718470c2ab758fe125db1f733b637377093140fa0f1a6b85c14ef9866ca
SHA512

74407ad8dc19ff4424563e1a56c8ffbd015d72a2c30bdfa5b93c4cea39cb2b1a362008a88899e2b0ed0e40118ac263b59ce049e7621379c65743886d721d6526
SSDEEP

24576:lcDQsfj9riqmmmllRuieIXDyjNcbLamz:SBJiJllRuiVXDWof

Score

N/A

Malware Config

Signatures

Files

3950f718470c2ab758fe125db1f733b637377093140fa0f1a6b85c14ef9866ca
.exe windows x86

b9838be1a69fe43f3dabea059131fb84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
GetDriveTypeW
lstrlenA
GetVolumePathNameA
GetDriveTypeW
LoadLibraryA
GetVolumeInformationW
GetDriveTypeW
OpenMutexA
GetFileSize
GetDriveTypeW
GetDriveTypeW
VirtualAlloc
DeleteFileW
GetCurrentDirectoryW
FindResourceW
GetDriveTypeW

netcfgx

LanaCfgFromCommandArgs
NetPropPageProvider
NetClassInstaller
NetCfgDiagFromCommandArgs

Sections

.play
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.gdata
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ