44e9505fb50590a9c9f33986ee83506a373598e2b760f5201e5021de67b888c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44e9505fb50590a9c9f33986ee83506a373598e2b760f5201e5021de67b888c6
Size

310KB
MD5

d8ebd5d163843433884635d703a373fe
SHA1

0aceec3589730c8df699ec6a1d59574ff2e4c33b
SHA256

44e9505fb50590a9c9f33986ee83506a373598e2b760f5201e5021de67b888c6
SHA512

581d4c14f21a3e94db67a6850897588169f0847c47ddfcf57d696001b668f3800ead8fbe5a77494f89d46bf82e032696f44929df49bdc0690ce1f7576e71ed42
SSDEEP

6144:A2rQh6YeLvPTY+hTPa6U/IXiArYsrrjjFxMgz5oRwX:Ac3/M+hTCmSiYsrBxHoRwX

Score

N/A

Malware Config

Signatures

Files

44e9505fb50590a9c9f33986ee83506a373598e2b760f5201e5021de67b888c6
.exe windows x86

f56fe4c570ada8acc320a88fe97e2d27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceW
InterlockedDecrement
GetLongPathNameA
SetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
VirtualAllocEx
WriteFileEx
Sleep
LoadLibraryA
ExitProcess
CreateDirectoryA
GetDiskFreeSpaceW
lstrcpyW
lstrcmpA
GetPrivateProfileIntA
Sleep
Sleep
GetPrivateProfileSectionA
WaitForSingleObject
GetPrivateProfileIntA
InterlockedIncrement
FindResourceW

apphelp

ApphelpCheckExe
SdbCreateMsiTransformFile
ApphelpCheckIME
AllowPermLayer

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rss
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ