b34d919c45b1e444074b2d2d33b2d9781efc5c6b3adcf684d3667d3e6b112d13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b34d919c45b1e444074b2d2d33b2d9781efc5c6b3adcf684d3667d3e6b112d13
Size

812KB
MD5

b4a745d00d71c68d35ef643a38c233bf
SHA1

190270b90dc2cd28a803271fe407fa806bdc9097
SHA256

b34d919c45b1e444074b2d2d33b2d9781efc5c6b3adcf684d3667d3e6b112d13
SHA512

9f697f7b535d8845aa67af3625e65b84a7875087b1f4c5d98e229344f4ba55492402be9a064489ac20be5ab83a2461d2c59202399834fbb20256168ab7ef0e66
SSDEEP

24576:iABwqSBqntyp0i3koUGiWl/7dMU/LBuN:isw8yiEzksd8N

Score

N/A

Malware Config

Signatures

Files

b34d919c45b1e444074b2d2d33b2d9781efc5c6b3adcf684d3667d3e6b112d13
.exe windows x86

ef54b79f541ea6318c5e672f8a9d38d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
GetFullPathNameA
lstrcpyW
lstrcpyW
lstrcpyW
TlsGetValue
lstrcpyW
GetNumberFormatA
TlsAlloc
GetModuleFileNameW
GetStartupInfoW
GetLocaleInfoW
SetConsoleTitleA
lstrlenW
GetCurrentProcess
GetModuleHandleA
SetCurrentDirectoryA
GetPrivateProfileIntA
FindNextVolumeW
lstrcpyW
CreateEventA
VirtualAlloc
DeleteFileA

untfs

Chkdsk
Format
??0NTFS_BOOT_FILE@@QAE@XZ
FormatEx

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ORPC
Size: 1024B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 796KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ