dc81eb28745e29e06db25901d161b3856666ede4c3a705ff7aa6b8aae9c3bcd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc81eb28745e29e06db25901d161b3856666ede4c3a705ff7aa6b8aae9c3bcd8
Size

815KB
MD5

0ecfac0f07b548bf7e837e84f2c19d30
SHA1

96043659215dfccadcb0b241cf0aeb7eccc48c85
SHA256

dc81eb28745e29e06db25901d161b3856666ede4c3a705ff7aa6b8aae9c3bcd8
SHA512

13b854adce7d11fc3108d179003ab6e2e1f821f74bf856cb5d9c38b2b047272956a75c3f4ffba8685d6e2416f7a42e740715d3299d3e35f4cdd2966d6f7a24ab
SSDEEP

12288:7sK3z/vuH5EbkSR3jf6EjmnhfvlLnTkxVIA/fbDl5e4e9/QOEN0xJUw08mD5T+:okOHCZR3L6I8t5TuuAXbDlQ2vuJUDp4

Score

N/A

Malware Config

Signatures

Files

dc81eb28745e29e06db25901d161b3856666ede4c3a705ff7aa6b8aae9c3bcd8
.exe windows x86

40dbbe93193d78751016007d6362116a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
DeleteFileW
lstrcpynA
GetNumberFormatW
CreateEventA
VirtualProtect
GetModuleFileNameW
lstrcpynA
FormatMessageA
GetStartupInfoW
GetFullPathNameA
GetModuleHandleA
TlsAlloc
SetCurrentDirectoryA
GetCurrentThread
lstrlenA
lstrcpynA
UnmapViewOfFile
lstrcpynA
TlsAlloc
TlsGetValue
GetLocaleInfoW
GetPrivateProfileIntA

wavemsp

DllUnregisterServer
DllGetClassObject
DllRegisterServer
DllCanUnloadNow

Sections

.text
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.rdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ndata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE