dc3008af2d939ffc2430e07f423b5ef2911e0deadd9b6c93a84f1053b0ee9c05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc3008af2d939ffc2430e07f423b5ef2911e0deadd9b6c93a84f1053b0ee9c05
Size

26.4MB
MD5

0627654567c2fcfa6f92ce75bec75cbc
SHA1

3481314feaa25e1cd7c40fe79fe773f6390d3841
SHA256

dc3008af2d939ffc2430e07f423b5ef2911e0deadd9b6c93a84f1053b0ee9c05
SHA512

8fdd9945d5c643c3b33eae2d213901f40d03cf29fc64fe9888c852d7b3a0a312fc27ac2271f8cae96198b7ec62de4007f7f652cd3d04f0e713c07752d6d0b644
SSDEEP

393216:96bJ610drKBckFg0YFOBopBtnQlaKHAcA0dzyY9swikPO6HGpaqI:9IJ6nBobrucp2

Score

N/A

Malware Config

Signatures

Files

dc3008af2d939ffc2430e07f423b5ef2911e0deadd9b6c93a84f1053b0ee9c05
.exe windows x86

fc9ae8768553a9930f55be6801914203

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
UnmapViewOfFile
VirtualAlloc
VirtualFree
GetProcAddress
GetModuleHandleA
SetLastError
VirtualProtect
LoadLibraryA
LoadLibraryExA
lstrcatA
lstrcpyA
GetModuleFileNameA
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
LoadLibraryExW
lstrcatW
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
GetCurrentProcess
SetEnvironmentVariableW
CloseHandle
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW
OutputDebugStringW
GetFileAttributesW

user32

wsprintfW
MessageBoxA

ntdll

NtProtectVirtualMemory
NtClose
LdrLoadDll
RtlInitUnicodeString
NtMapViewOfSection
NtCreateSection
LdrGetProcedureAddress
NtUnmapViewOfSection

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 138KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ