f4a70e696d4fbd1c0088c8730553841334c423531b9222348b460a8eb4ef33f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4a70e696d4fbd1c0088c8730553841334c423531b9222348b460a8eb4ef33f0
Size

818KB
MD5

1a8eb1c913c3e7091270530104180515
SHA1

996351500e87ce9808dee3cfa95f26e087a1f9b7
SHA256

f4a70e696d4fbd1c0088c8730553841334c423531b9222348b460a8eb4ef33f0
SHA512

5312ff7115d6351d80e4b73ee2400fce87a4592dc3d9f10112141fc93f0fce520ea1455cc5813cef9fc56b67fd044a10aaacf8a4a85e3a7112632e2eeeaf83ed
SSDEEP

24576:ef6Hu3qG77k3rS7bwqmU45JOGiP1gc6SOlPdhf+:eCiqG77k3e7Mqcv/iPl6SOlP

Score

N/A

Malware Config

Signatures

Files

f4a70e696d4fbd1c0088c8730553841334c423531b9222348b460a8eb4ef33f0
.exe windows x86

5bc580082e94207b945c40cadbe7e02c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
SetThreadPriority
lstrcpynA
Heap32First
VirtualProtectEx
GetCurrentDirectoryA
lstrcmpW
ReadConsoleA
GetPrivateProfileIntA
lstrcpynA
GetDiskFreeSpaceW
GetVolumeInformationA
WriteFile
lstrcpynA
lstrcpynA
lstrcpynA
FindFirstVolumeA
VirtualFree
lstrcpynA
lstrcatA
lstrcpynA
lstrcpynA
lstrcpynA
GetCurrentThreadId
OpenMutexW
lstrcpynA
GetDriveTypeA
GetSystemTime
GetModuleHandleA

cmdial32

InetDialHandler
RasCustomDialDlg
AutoDialFunc
RasCustomDial

Sections

.text
Size: 18KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ