b014489f3b07d064147187d52ce104dc9e787688b4402e22f4030a3bd576ac8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b014489f3b07d064147187d52ce104dc9e787688b4402e22f4030a3bd576ac8d
Size

814KB
MD5

2f0a36980139533feeee3d095b83296e
SHA1

4eab2ccfeee31f05d4bd91708a5ae8f08aced0ee
SHA256

b014489f3b07d064147187d52ce104dc9e787688b4402e22f4030a3bd576ac8d
SHA512

a9ec838f8c707a2b76ebcb89a95f80f8bfe47c0b6aeaf292b3aa870f1a9ced0f517b457c2e702bcb786537beb71ebb4d593e331ec678dfe5dfdd931a14c1744f
SSDEEP

12288:Y0susl7REar3Gl6SQvu0DIS9slIroMQEPbk0P6otnj1EkF4eOWPoSJnwV0KD0RNO:3Dk3c6SQm0sSSmsMbHSocEosXNO

Score

N/A

Malware Config

Signatures

Files

b014489f3b07d064147187d52ce104dc9e787688b4402e22f4030a3bd576ac8d
.exe windows x86

a9149d64c91ce4af32c9c5a9e5dc037a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
lstrlenA
FindResourceW
GetDriveTypeW
OpenMutexA
GetDriveTypeW
GetDriveTypeW
GetDriveTypeW
GetDriveTypeW
VirtualAlloc
DeleteFileW
GetCurrentDirectoryW
GetDriveTypeW
GetVolumePathNameA
GetDriveTypeW
LoadLibraryA
GetVolumeInformationA

msxml6

DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllSetProperty

Sections

.play
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ