0e666cff270eb62067a7b7d1d867a9855ad4478422969fabe6741fbcd060fa3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e666cff270eb62067a7b7d1d867a9855ad4478422969fabe6741fbcd060fa3c
Size

308KB
MD5

49102e9373ede3383757450da3228470
SHA1

1e4f98871326f9f988e9e8d3e9469a981cedd299
SHA256

0e666cff270eb62067a7b7d1d867a9855ad4478422969fabe6741fbcd060fa3c
SHA512

853922076448a72fc6ec91d50ce1a960b09f37d701032ad2e779e0f9bb9be552e9e6b8c27f16d0406c023ef122854d6007c8f3880f4b838c1ef74a131c2d6a58
SSDEEP

6144:m7VcHM6wTWkWSJAyXJm4zoiaYBe5wZfCO94Wp0Q1U0BEILIXNO7pG:mxcJoLAyXs4VaYM5kKOuWp0omILIXNmp

Score

N/A

Malware Config

Signatures

Files

0e666cff270eb62067a7b7d1d867a9855ad4478422969fabe6741fbcd060fa3c
.exe windows x86

e18571b99af606dc976fd04fbc4b98c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
CreateEventA
GetStartupInfoW
GetNumberFormatA
lstrcpynA
lstrcpynA
TlsGetValue
GetFullPathNameA
lstrlenA
lstrcpynA
TlsAlloc
GetPrivateProfileIntA
VirtualAlloc
DeleteFileW
FindNextVolumeW
FormatMessageA
GetModuleFileNameW
GetLocaleInfoW
SetCurrentDirectoryA
lstrcpynA
TlsAlloc
GetCurrentProcess
GetModuleHandleA

vssapi

??0CVssWriter@@QAE@XZ
VssFreeSnapshotProperties
??1CVssWriter@@UAE@XZ
??0CVssJetWriter@@QAE@XZ

Sections

.text
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ