f70e1cd9c4e48426b61fb4420bda33a1931dce47257bbc8c3047d00e3b7ffced | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f70e1cd9c4e48426b61fb4420bda33a1931dce47257bbc8c3047d00e3b7ffced
Size

309KB
MD5

8f0f456fb29197b09acc2537d0c958c8
SHA1

a3837f31daf336488fe3366a612f1cb9629ebd97
SHA256

f70e1cd9c4e48426b61fb4420bda33a1931dce47257bbc8c3047d00e3b7ffced
SHA512

90a5dbd28af5ddc3e51941d7f0f3d36481c1d45471a5c53d077b058261dfbd007a36348331f9a5bf1f05ac83c1c0d93416c882eb44f181ccb59f428b72aa3685
SSDEEP

6144:lZVp7Eryr46jUTwNvXcuJ3H2G3i/drRBxefyS3:lZ3EOE6jUTw+mWag5RBxeK0

Score

N/A

Malware Config

Signatures

Files

f70e1cd9c4e48426b61fb4420bda33a1931dce47257bbc8c3047d00e3b7ffced
.exe windows x86

cee750b4725b48a061ee9567d3c0620b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameA
lstrcpyW
GetDiskFreeSpaceW
GetDiskFreeSpaceW
InterlockedDecrement
lstrcmpA
GetExitCodeProcess
LoadLibraryA
WriteFileEx
WaitForSingleObject
InterlockedIncrement
GetCurrentDirectoryA
GetStringTypeW
ExitProcess
VirtualAllocEx
GetModuleHandleW
FindResourceW
SetEnvironmentVariableA
GetPrivateProfileSectionA
Heap32First
GetACP
GetPrivateProfileIntA
GetPrivateProfileIntA

apphelp

ApphelpCheckExe
AllowPermLayer
ApphelpCheckIME
SdbCreateMsiTransformFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE