8179c9ad98ed84061873e37384cd08760e46a741d51c5b8801916b7c1f599230 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8179c9ad98ed84061873e37384cd08760e46a741d51c5b8801916b7c1f599230
Size

63KB
MD5

546adcb60d13476e5fb3e3bfd857f62b
SHA1

1ba802c7a4757eb81f96bb3bad2fe5fb3413b830
SHA256

8179c9ad98ed84061873e37384cd08760e46a741d51c5b8801916b7c1f599230
SHA512

ec3bdc19eff8d95ebf8c2b077702cb23ea4600f89aa88ab11d8434bd8ec244b17e6e3abe378793d4dcfc03bc0e333464413531d279bcf947c1222adb9342ba5b
SSDEEP

1536:Vet/XloKGks9Q27/EOXW0F5EIOIqcaPdEeTdckZPTX:VeBWKW9Q2j7XW0FyIOIqNESl7

Score

N/A

Malware Config

Signatures

Files

8179c9ad98ed84061873e37384cd08760e46a741d51c5b8801916b7c1f599230
.exe windows x86

512705d04c5522c0bbf8e9992b3c3805

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClearCommError
CreateDirectoryExW
GetPriorityClass
FindNextVolumeA
GetFileType
ReplaceFile
TerminateProcess
FindFirstFileA
GetThreadSelectorEntry
FindFirstVolumeA
VirtualAllocEx
GetTickCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE