0617885c590954715e40707cc7f3823d9decf79964716739b5291ea2c7ee6970 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0617885c590954715e40707cc7f3823d9decf79964716739b5291ea2c7ee6970
Size

3KB
MD5

b1d133ee7bf5209d27b870443886cf20
SHA1

46009ec564298966a67186b06264f872aec0f8a0
SHA256

0617885c590954715e40707cc7f3823d9decf79964716739b5291ea2c7ee6970
SHA512

6283e515b1dd1f47d34f02763073920e81d82db569d1e96973709c5bf0e3794a669e17df9a0f45a265f5418b126edb959e1548eccaa812e5a211fc052e50d303

Score

N/A

Malware Config

Signatures

Files

0617885c590954715e40707cc7f3823d9decf79964716739b5291ea2c7ee6970
.dll windows x86

0b69d5093becb476150c8c4a428dc314

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetProcAddress
GetModuleHandleA
lstrcmpiA
FindFirstFileA
FindNextFileA
WideCharToMultiByte
FindFirstFileW
FindNextFileW

msvcrt

_stricmp
sprintf

shlwapi

PathStripPathA

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ