f6c3843eeab080a042e3c8934ae2f08ba7d6bfd88688b8e0442097b565a63a6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6c3843eeab080a042e3c8934ae2f08ba7d6bfd88688b8e0442097b565a63a6c
Size

819KB
MD5

8d05f4dcf2c94f6bfe020490284f52c6
SHA1

e85be981f1038e03b741f19b8e0b89d58e775803
SHA256

f6c3843eeab080a042e3c8934ae2f08ba7d6bfd88688b8e0442097b565a63a6c
SHA512

4f761f6740b2d7248dad8f281b3a03a6288ba9d8ed548034cfe9918ba7ba06a7740860e0e6395859147eabcff45d8a6196f7cc5945f82e4fa0f5795c841a74fc
SSDEEP

12288:3ERAyF1OCy0L1j18oqPTJ2Z3xXVhmDt6ftfz766PvjCyO9uzu:3kAyOCy0RJ2EZBXVhmyFn66PLCy

Score

N/A

Malware Config

Signatures

Files

f6c3843eeab080a042e3c8934ae2f08ba7d6bfd88688b8e0442097b565a63a6c
.exe windows x86

1753347eebde24736808ed8d8fc74355

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
ReadConsoleA
GetCurrentProcess
GetDiskFreeSpaceW
lstrcpynA
FindFirstVolumeW
OpenMutexW
lstrcpynA
Heap32Next
lstrcatA
GetVolumeInformationA
WriteFile
GetFileType
VirtualFree
lstrcpynA
SetThreadPriority
lstrcmpW
lstrcpynA
GetDriveTypeW
VirtualProtectEx
GetSystemTime
lstrcpynA
GetCurrentDirectoryA
GetModuleHandleA
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
lstrcpynA

d3d8

ValidateVertexShader
ValidatePixelShader
DebugSetMute
Direct3DCreate8

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 796KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ