d6b0c07c2c2e9d84c94b96e9da025a46d184ad1f96fbe823fb6956baef3de31d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6b0c07c2c2e9d84c94b96e9da025a46d184ad1f96fbe823fb6956baef3de31d
Size

818KB
MD5

9142a62d4d02f24226a83e601ba86244
SHA1

bc047be7d2c31c7bbd38b3f6ae97ebdb53369dc9
SHA256

d6b0c07c2c2e9d84c94b96e9da025a46d184ad1f96fbe823fb6956baef3de31d
SHA512

9e61e2849d4808be4a775ca69f3a40ca3e731d30c9b27f67c1ac43fde3c79b4a5cee11f8b26d7a40444c6fcb83b2aea4082218d001187a9fa72c2b94e6f50230
SSDEEP

24576:gcS7lSjRjLKj1eoMlddkxxw+dTMZEMSqn9M:gzSAj1eoWoMrbM

Score

N/A

Malware Config

Signatures

Files

d6b0c07c2c2e9d84c94b96e9da025a46d184ad1f96fbe823fb6956baef3de31d
.exe windows x86

d60423d91421607658bd9da17b3e5c49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexW
lstrcpynA
GetDiskFreeSpaceW
GetVolumeInformationA
GetPrivateProfileIntA
VirtualFree
lstrcpynA
lstrcpynA
lstrcpynA
GetCurrentThreadId
FindFirstVolumeA
GetFileType
GetModuleHandleA
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
lstrcpynA
VirtualProtect
lstrcpynA
lstrcpynA
lstrcpynA
Heap32First
GetSystemTime
GetDriveTypeA
lstrcmpW
SetThreadPriority
lstrcatA
ReadConsoleA
WriteFile

comuid

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ