8784090957f2efd260a90714932defaa370284bcc8ca231f25ec1aeea755aafe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8784090957f2efd260a90714932defaa370284bcc8ca231f25ec1aeea755aafe
Size

307KB
MD5

19c118498911047d146d064b1baf95c0
SHA1

4ba718cb9509fe4789649add9224211babec4867
SHA256

8784090957f2efd260a90714932defaa370284bcc8ca231f25ec1aeea755aafe
SHA512

dd990cd6e4d73b67465060c583a276a37472c01eaf598b6250a5ebffb163c064afaea893493d7576b8a10aa90aa9e053f1d2d09f4b8dfca0a3de32794b90e572
SSDEEP

6144:BVcxYb0/EfrXpJEAHOdtn2lI7uG7dRu8o5MCv8E4XYfaTESWcd:fcg08frNHOdtnj755o8EWE4o4

Score

N/A

Malware Config

Signatures

Files

8784090957f2efd260a90714932defaa370284bcc8ca231f25ec1aeea755aafe
.exe windows x86

c42e54470bf82979d0ade9cb1e834da6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
CreateEventA
GetModuleFileNameW
GetPrivateProfileIntA
TlsAlloc
lstrcpynA
TlsAlloc
lstrcpynA
GetCurrentProcess
lstrcpynA
DeleteFileW
GetNumberFormatA
GetModuleHandleA
GetFullPathNameA
lstrcpynA
SetCurrentDirectoryA
GetStartupInfoW
VirtualAlloc
GetLocaleInfoW
lstrlenA
FormatMessageA
FindNextVolumeW
TlsGetValue

vssapi

VssFreeSnapshotProperties
IsVolumeSnapshotted
??1CVssWriter@@UAE@XZ
??0CVssWriter@@QAE@XZ

Sections

.text
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ