fa889f8bfd508269ff6bf25e66f9bf0c856097954a71b2ff53ba1f21c8f64045 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa889f8bfd508269ff6bf25e66f9bf0c856097954a71b2ff53ba1f21c8f64045
Size

818KB
MD5

4066461158458ae05fd5f48797dff752
SHA1

ddd0d5250934017af4f6673be6384616fdf474a2
SHA256

fa889f8bfd508269ff6bf25e66f9bf0c856097954a71b2ff53ba1f21c8f64045
SHA512

22d1a765bf8ffd8acf756ff6f95e42a432c4108ca01cd051dde9978ca8151a2a2a1abccdd6bd9e697207fde0d33235e331b622dda8d02c8235ca4dc5829114c5
SSDEEP

24576:eK4jsVcHUybnWkF1CcfaymDu+62BdROAE+FR2:eK4Q2HlWkLC8+62BdcAVm

Score

N/A

Malware Config

Signatures

Files

fa889f8bfd508269ff6bf25e66f9bf0c856097954a71b2ff53ba1f21c8f64045
.exe windows x86

ad132ca25bfb086a8fab26abae8c0fe6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
GetDiskFreeSpaceW
OpenMutexW
lstrcatA
lstrcmpW
GetCurrentDirectoryA
lstrcpynA
GetModuleHandleA
GetVolumeInformationA
GetDriveTypeA
VirtualProtect
lstrcpynA
FindFirstVolumeA
lstrcpynA
GetCurrentThreadId
SetThreadPriority
lstrcpynA
lstrcpynA
WriteFile
lstrcpynA
lstrcpynA
GetSystemTime
GetPrivateProfileIntA
Heap32First
ReadConsoleA
GetFileType
lstrcpynA
VirtualFree
lstrcpynA

comuid

DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ