e96cd0374f87eeef389d5e358e788a67eee37a11fce2beb142377984228bf752 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e96cd0374f87eeef389d5e358e788a67eee37a11fce2beb142377984228bf752
Size

303KB
MD5

3bf1e60c4de02b73696eab03d2a5e792
SHA1

160a5b5bdd7fbe5129a4f6f357edbad380511f1a
SHA256

e96cd0374f87eeef389d5e358e788a67eee37a11fce2beb142377984228bf752
SHA512

bfe9866bfbcc4ca8a856439cac433270432df14934de5ba546536ffa878bd97d7fcda3788c849d006afae8e0585488f450438114bbfdb1d980f690adb7e664b0
SSDEEP

6144:e40qtgAXlbnfdlmYbOxuTV15rfAoeLRkKZ8La3Qber8pkK:P0qtg8lbHOxC37VYum8LMQber8pn

Score

N/A

Malware Config

Signatures

Files

e96cd0374f87eeef389d5e358e788a67eee37a11fce2beb142377984228bf752
.exe windows x86

9526ea96eb16ad7b8841efd9154667bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
SetEnvironmentVariableW
WaitForSingleObject
Sleep
LoadLibraryExA
GetLongPathNameW
GetFileAttributesA
GetPrivateProfileIntW
FindResourceW
lstrcmpA
Sleep
InterlockedIncrement
Sleep
GetExitCodeProcess
GetPrivateProfileIntW
WriteFileEx
GetDiskFreeSpaceA
LoadLibraryA
lstrcmpiA
InterlockedDecrement
GetDiskFreeSpaceA
CreateDirectoryA
GetPrivateProfileSectionA

catsrv

CreateComponentLibraryTS
GetCatalogCRMClerk
DllCanUnloadNow
OpenComponentLibraryTS

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE