df3275e6622219ae69a9f421ae069357fa3c52897d17b200043172d23e6d008f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df3275e6622219ae69a9f421ae069357fa3c52897d17b200043172d23e6d008f
Size

117KB
MD5

00f6c6d0a8f9675ea102d5649b5bafb0
SHA1

ebe596e79e4f0e277c72fa6810e7e05e1973640b
SHA256

df3275e6622219ae69a9f421ae069357fa3c52897d17b200043172d23e6d008f
SHA512

028e5b393775a875614e723e97364c9f88ce98e4aca1d162bdb26ac32ec70b472b236ba4e32f7564e59d5ed6724753a4d9934ec7651b063cc2622668628663a2
SSDEEP

3072:+jXRzudgRE62BNAdPFT2HVrPEwRUplm8w1r:aZKgp2CFgEwkq

Score

N/A

Malware Config

Signatures

Files

df3275e6622219ae69a9f421ae069357fa3c52897d17b200043172d23e6d008f
.exe windows x86

8e08fa87d41bddf8044cede458a0632f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
WriteConsoleW
GetModuleHandleW
GetStringTypeW
GetLastError
HeapFree
GetExitCodeProcess
GetProcessHeap
SetFilePointer
DeleteFileA
GetShortPathNameW
Heap32Next
CreateFileMappingW
DeleteFileA
HeapCreate
GetModuleHandleA
GetProcessHeap
GetConsoleTitleA
GetACP
GetStringTypeW
DeleteFileA
SetEnvironmentVariableA
SetCurrentDirectoryA

mstscax

DllCanUnloadNow
DllUnregisterServer
DllRegisterServer
DllGetTscCtlVer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rs
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ