1876f443da09c655150b11ae97986640c7c71a0208031fc3f3f94fed383d63e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1876f443da09c655150b11ae97986640c7c71a0208031fc3f3f94fed383d63e8
Size

121KB
MD5

34ab3220ef5a4ef35be7daf478025430
SHA1

7636164b385d5b41aa872451dad02827f5ab27de
SHA256

1876f443da09c655150b11ae97986640c7c71a0208031fc3f3f94fed383d63e8
SHA512

dae7978867866eb16383d52b8c75d5b5a4393249db5cba617dc034914929b144d1d8142f383270f1e249f8c256a240413be6a24a0dce795212a9cb72f5bcab54
SSDEEP

1536:x0S1pjn7OZIRmSBJUdFu7wHh+Twg7E5EqkHPEuzHGABmgfLfDvDmmGMeE+k:Fjn7OZGrF8jJunBLfTDvDnwk

Score

N/A

Malware Config

Signatures

Files

1876f443da09c655150b11ae97986640c7c71a0208031fc3f3f94fed383d63e8
.exe windows x86

f0daf8ee4e8548fdba2693f72734ed9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetDiskFreeSpaceW
InterlockedIncrement
lstrcmpA
HeapCreate
GetLongPathNameW
GetPrivateProfileIntW
WriteFileEx
SetEnvironmentVariableA
Sleep
FindResourceW
Sleep
GetPrivateProfileSectionA
GetExitCodeProcess
Sleep
InterlockedDecrement
WaitForSingleObject
LoadLibraryA
LoadLibraryExA
GetDiskFreeSpaceW
GetPrivateProfileIntW
CreateDirectoryA
lstrcmpiA

catsrv

GetCatalogCRMClerk
DllCanUnloadNow
CreateComponentLibraryTS
OpenComponentLibraryTS

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE