3c16f57a57a86989b91cb9b123dae3686c807fd0a307dc2fd4e2914e5af8fd7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c16f57a57a86989b91cb9b123dae3686c807fd0a307dc2fd4e2914e5af8fd7d
Size

308KB
MD5

388a7811f016ccf4caa8da48523cb07e
SHA1

4d146a2a28bf81cc0f53417031bf1862db6db2ef
SHA256

3c16f57a57a86989b91cb9b123dae3686c807fd0a307dc2fd4e2914e5af8fd7d
SHA512

acd7a5aa3c4d1560beeaf82ab47c7b09823b7bc1b2bab7fca05f49211f269514d8e0a85e3d61f2ab826c643e7a66b1de6a396821c039828d2bcd91375d0dbb70
SSDEEP

6144:mRVcPhqMnb1TqHkW1XKb0E424Us5LAyv6/jC9/:wcPhrb5K68UaMfjC9/

Score

N/A

Malware Config

Signatures

Files

3c16f57a57a86989b91cb9b123dae3686c807fd0a307dc2fd4e2914e5af8fd7d
.exe windows x86

8fb04e64a3f13fc13c5c7c7cdba076aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
FindNextVolumeW
lstrlenA
CreateEventA
FormatMessageA
lstrcpynA
GetLocaleInfoW
VirtualAlloc
TlsGetValue
GetStartupInfoW
GetModuleFileNameW
TlsAlloc
SetCurrentDirectoryA
GetCurrentProcess
TlsAlloc
GetModuleHandleA
lstrcpynA
GetNumberFormatA
lstrcpynA
GetFullPathNameA

vssapi

??0CVssWriter@@QAE@XZ
VssFreeSnapshotProperties
??0CVssJetWriter@@QAE@XZ
??1CVssWriter@@UAE@XZ

Sections

.text
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ