e43712cb77a4844f3029016a7200b60ec5b4365f8f82f6be1c5cd7fed587b212 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e43712cb77a4844f3029016a7200b60ec5b4365f8f82f6be1c5cd7fed587b212
Size

122KB
MD5

9cdd040c58fb63acdae37780b80aef12
SHA1

c7c57564d716fc52403383e79e13fb30f17fccdd
SHA256

e43712cb77a4844f3029016a7200b60ec5b4365f8f82f6be1c5cd7fed587b212
SHA512

c9d6bd7e4d94432f254429eb04a04422016ba8ee86520605fc1810944c444a0a2c9093072960589c0f62e3464809f146af4aad24e5593a5862308f7d292b4e1e
SSDEEP

1536:vRipqgL9LUsEp4KA/RhsxnaLAEPnxtE+7QvFyzmzPvfCi3wa2mWdzkknfLKwvoQt:pipj2s045ZrLJJ76RH3x2++eiPsgr

Score

N/A

Malware Config

Signatures

Files

e43712cb77a4844f3029016a7200b60ec5b4365f8f82f6be1c5cd7fed587b212
.exe windows x86

898424c313e61752ae5b4fb6fb671237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetFileAttributesA
GetDiskFreeSpaceA
FindResourceW
SetEnvironmentVariableW
InterlockedExchange
HeapCreate
InterlockedIncrement
Sleep
Sleep
GetDiskFreeSpaceA
GetPrivateProfileSectionA
CreateDirectoryA
WriteFileEx
lstrcmpA
GetLongPathNameW
GetPrivateProfileIntW
GetExitCodeProcess
Sleep
GetModuleHandleA
WaitForSingleObject
lstrcmpiA
GetPrivateProfileIntW

catsrv

CreateComponentLibraryTS
OpenComponentLibraryTS
DllCanUnloadNow
GetCatalogCRMClerk

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE