c2258eff0bcb70cfa36ed533ad90baad9856dbbe0f856a4da966840a04d8a94f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2258eff0bcb70cfa36ed533ad90baad9856dbbe0f856a4da966840a04d8a94f
Size

811KB
MD5

44e4e3b89ac403bb836f050664988e40
SHA1

d2f331ec1aecae4f654a048f6da8091c268b1eaf
SHA256

c2258eff0bcb70cfa36ed533ad90baad9856dbbe0f856a4da966840a04d8a94f
SHA512

89b38477465f9c3dea415b8febd0d183b1adb3eaf2d38cccca2d322cd2b287ad9afd0555ae54952e124f8907d4cbf64b6616491fbf37393ad3bb248c922f76ec
SSDEEP

12288:4lIsNmso2m6uZeGwLR69KOVzvlKcD38ln4xBCDTpNsFBlSrDtiU4c1lOOsyaBv5p:MRoP6aeGY5OlqqcDdN4lSkBCl+Jv6BF

Score

N/A

Malware Config

Signatures

Files

c2258eff0bcb70cfa36ed533ad90baad9856dbbe0f856a4da966840a04d8a94f
.exe windows x86

1c798f48ec470c75569b7c1295b4d3b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
GetStartupInfoW
lstrcpyW
VirtualAlloc
lstrcpyW
DeleteFileA
lstrlenW
SetStdHandle
GetLocaleInfoA
GetModuleFileNameW
FindNextVolumeW
lstrcpyW
GetModuleHandleA
lstrcpyW
GetNumberFormatA
lstrcpyW
IsBadStringPtrW
SetConsoleTitleA
CreateEventA
GetFullPathNameA
GetPrivateProfileIntA
GetCurrentProcess
TlsAlloc

untfs

Recover
Extend
Format
ChkdskEx

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 796KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EDATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ