51aa1699e5aa9753aaf417f01f2a28cf65f2f33d1a0d8748011f31818642d7fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51aa1699e5aa9753aaf417f01f2a28cf65f2f33d1a0d8748011f31818642d7fd
Size

822KB
MD5

ab841eaa27c361f06ebfe15305c10aaf
SHA1

7c2efd6c6a1f80288d3323ab0fc77fef2817dbb0
SHA256

51aa1699e5aa9753aaf417f01f2a28cf65f2f33d1a0d8748011f31818642d7fd
SHA512

3b3562ae0dd20d7113515386e9ae094ba67c9e3b9814304477559734d66694f498379b680d39eb869968a2904fdb76e24ad9165d686b76ebd9f5113d540f2704
SSDEEP

12288:NTmMMzJZMj80kA3CBszH6ICnrsVuw1hJ3CSVV3wf2pNJz6D4UAbgZnSu6q:dm5FWwO9GIC6uw1DNufif6D4UAyp6

Score

N/A

Malware Config

Signatures

Files

51aa1699e5aa9753aaf417f01f2a28cf65f2f33d1a0d8748011f31818642d7fd
.exe windows x86

1460d0bde89c50b6360e7f0de7a2cf6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeW
VirtualFree
GetPrivateProfileIntA
lstrcpynA
lstrcpynA
lstrcmpW
lstrcpynA
GetSystemTime
GetCurrentProcessId
lstrcpynA
lstrcpynA
VirtualProtectEx
Heap32Next
GetLastError
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
GetDiskFreeSpaceW
lstrcatA
WriteFile
ReadConsoleA
lstrcpynA
GetFileType
lstrcpynA
GetModuleHandleA
OpenMutexW
GetVolumeInformationA
lstrcpynA
GetDriveTypeW

d3d8

DebugSetMute
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader

Sections

.text
Size: 19KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 798KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ