df99697bd32f59bcfdfc08f1ac3c20684728ca412f104d45d03b983234f933fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df99697bd32f59bcfdfc08f1ac3c20684728ca412f104d45d03b983234f933fa
Size

307KB
MD5

1d033a9fc9a72eeb58ad83f6a8cb49a0
SHA1

2d153f0d43ed5cf658626d2f7f5eccbbe484a0f5
SHA256

df99697bd32f59bcfdfc08f1ac3c20684728ca412f104d45d03b983234f933fa
SHA512

56b09c64139a6f91c7577ccd1928f44204e38ece441d84a28edccce15daead8809a488db478761ad15b1065e81654ebbbafbf55e395882d628f4178deaf742ff
SSDEEP

6144:l+Z+LgX7EOPQSwi0GqEgn1cs5xe9Dxdw:JgEGfqEgn1cs29

Score

N/A

Malware Config

Signatures

Files

df99697bd32f59bcfdfc08f1ac3c20684728ca412f104d45d03b983234f933fa
.exe windows x86

1254a28972de396363cfc1438c96a5d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32Next
GetStringTypeW
DeleteFileA
Heap32First
VirtualAlloc
SetEndOfFile
WriteConsoleW
CreateFileMappingW
GetACP
SetEnvironmentVariableA
GetConsoleAliasW
GetModuleHandleW
GetConsoleTitleA
CreateMailslotW
SetCurrentDirectoryA
GetVersion
GetShortPathNameW
SetFilePointer
DeleteFileA
GetProcessHeap
GetStringTypeW
LoadLibraryA
DeleteFileA

msoeacct

GetDllMajorVersion
DllGetClassObject
DllCanUnloadNow
ValidEmailAddress

Sections

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avr
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ