c3b766e139cd9e44e3af0e138898aa6fdf5ba8049642fc330dd4ee2d29da8680 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3b766e139cd9e44e3af0e138898aa6fdf5ba8049642fc330dd4ee2d29da8680
Size

817KB
MD5

11221a5af6c31a48bdde23ef14634318
SHA1

6dcdf7acaa2b005816013330f4a0dc7b63599a7e
SHA256

c3b766e139cd9e44e3af0e138898aa6fdf5ba8049642fc330dd4ee2d29da8680
SHA512

a83d83738608dd5921643685b804b063643d4a8017843c09b9b43569ddd79984366e82653f53dd1bdfaa70bd1a5811108802b32a94609c8221de075b07520cf3
SSDEEP

12288:wOB1pVAfjDp4mdz/6GS8fGwTyVJOBXj+sv1n5PaTt1FAOxqofyUfn+NgI9CoxvBy:wOBhAfj5dz2W1mVQh4bFiWfn+Nn9Ccc

Score

N/A

Malware Config

Signatures

Files

c3b766e139cd9e44e3af0e138898aa6fdf5ba8049642fc330dd4ee2d29da8680
.exe windows x86

a3b7cfea7854507bdd3167e4ed19db5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualFree
lstrcpynA
GetFileSize
GetFileType
GetDiskFreeSpaceW
GetModuleHandleA
GetCurrentThreadId
lstrcpynA
lstrcpynA
lstrcpynA
SetThreadPriority
ReadConsoleA
lstrcpynA
ReadFile
GetCurrentDirectoryA
lstrcmpA
OpenMutexW
lstrcpynA
FormatMessageW
GetPrivateProfileIntA
lstrcatA
CreateDirectoryW
lstrcpynA
lstrcpynA
lstrcpynA
DeleteFileW
VirtualProtectEx
GetCommandLineW
lstrcpynA

certcli

CADeleteCertType
CAEnumNextCA
CAFindByCertType
CAEnumFirstCA

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ