69e97ab63672aa4ea8ae34aa219c693579de6778e9b3cf5da039d0fddca6ad13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69e97ab63672aa4ea8ae34aa219c693579de6778e9b3cf5da039d0fddca6ad13
Size

818KB
MD5

cc90522a9ba8260db669621e36144726
SHA1

e3f2fcfc7d049d1540fe2c653ef3b9a4a7021eb5
SHA256

69e97ab63672aa4ea8ae34aa219c693579de6778e9b3cf5da039d0fddca6ad13
SHA512

7169fc8f2cd2d48261bdcc8569d6650605a664c4208d9a746dac8725f4a66ac6ee9cc8acb21fbcbbcdddd1ee2ef888fd1476e1b90a4ed0ebbc5c45d656a9513d
SSDEEP

24576:HaxvOH1sytDbAzhxnvKRMGAQMQf6WnpkZpY:H8opshxvmMGA9Qf6Wnu

Score

N/A

Malware Config

Signatures

Files

69e97ab63672aa4ea8ae34aa219c693579de6778e9b3cf5da039d0fddca6ad13
.exe windows x86

a59c3933ec9a888733ac9a8ba1ca78cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
WriteFile
lstrcpynA
lstrcpynA
GetFileType
lstrcpynA
lstrcpynA
GetVolumeInformationA
lstrcpynA
lstrcatA
OpenMutexW
lstrcpynA
GetDriveTypeA
SetThreadPriority
FindFirstVolumeA
GetCurrentThreadId
lstrcpynA
GetPrivateProfileIntA
ReadConsoleA
GetDiskFreeSpaceW
VirtualFree
lstrcpynA
GetCurrentDirectoryA
GetSystemTime
VirtualProtectEx
lstrcpynA
lstrcpynA
Heap32First
GetModuleHandleA

cmdial32

AutoDialFunc
RasCustomDial
RasCustomDialDlg
InetDialHandler

Sections

.text
Size: 18KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ