757d4fe250b5cdde6c308172b102db94d61cae395b6fdb31f1b0c8a6d8be187d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

757d4fe250b5cdde6c308172b102db94d61cae395b6fdb31f1b0c8a6d8be187d
Size

76KB
MD5

a6155cecbbb0de8b95d72c01c2f8b525
SHA1

6cb183ec78c1dfca029213bffaf5e16cd00bbe06
SHA256

757d4fe250b5cdde6c308172b102db94d61cae395b6fdb31f1b0c8a6d8be187d
SHA512

8a4a90ad8afdbbb21512259664056358336bb75459fbd2132988544d0297f5c403d5d39cbec341d6e7114bc2c0225a2c094f0eb35398435d3ee9d81edd73d99a
SSDEEP

1536:azd9r/QFMnor5I5O9BxcshYI82hW8fPL9:09frM97csT8vYL9

Score

N/A

Malware Config

Signatures

Files

757d4fe250b5cdde6c308172b102db94d61cae395b6fdb31f1b0c8a6d8be187d
.exe windows x86

ebc9cdaa04570f098bb785bb40a13ce7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileSectionA
GetConsoleDisplayMode
GetCurrentDirectoryW
FreeLibrary
GetProcessHeaps
SetVolumeMountPointA
Process32NextW
IsValidLanguageGroup
PrivCopyFileExW
GetVolumeNameForVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE