c1d38057fc745513ab5e7de2ca62db188a65739b4f5d7013006e511a879480b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1d38057fc745513ab5e7de2ca62db188a65739b4f5d7013006e511a879480b5
Size

815KB
MD5

e061cee61dfdaa394836d5625f00fb6b
SHA1

5e08cc1e21ee2fb6e0b46769a9e57d959a804a73
SHA256

c1d38057fc745513ab5e7de2ca62db188a65739b4f5d7013006e511a879480b5
SHA512

8748ceed9f55f31a18fbaa7769e3df37fa29b9a5cfbde46a8bc302e7de40efee3a5ad377ce451c7399c5c06fa6028741dc95d11565fb15eb895ff8cdc9ca9777
SSDEEP

12288:kPokLZeTkZacLtSyc+82esDDm4yzF1dNSBSGg4dtW4gjXkg4dAOoDhuOr0hLbMyb:enltQD2esD64uNSx1UXk5DbO4qR5qs9

Score

N/A

Malware Config

Signatures

Files

c1d38057fc745513ab5e7de2ca62db188a65739b4f5d7013006e511a879480b5
.exe windows x86

ccea507260f08981bdd375dbbecc3fc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
DeleteFileW
SetCurrentDirectoryA
CreateEventA
GetModuleHandleA
TlsAlloc
GetModuleFileNameW
GetStartupInfoW
TlsAlloc
GetNumberFormatA
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
lstrlenA
lstrcpynA
lstrcpynA
VirtualAlloc
FindNextVolumeW
FormatMessageA
GetFullPathNameA
lstrcpynA
GetCurrentProcess
TlsGetValue

vssapi

IsVolumeSnapshotted
??0CVssWriter@@QAE@XZ
??1CVssWriter@@UAE@XZ
VssFreeSnapshotProperties

Sections

.text
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 797KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE