25ea8ae69503597bc18ef28863e679352de5e2822331fccf03c3ec51b395aa37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25ea8ae69503597bc18ef28863e679352de5e2822331fccf03c3ec51b395aa37
Size

822KB
MD5

57b72ebdd82ea3505f053875c884bb7b
SHA1

6102cc8374dfc40c992909e954851cff281f983f
SHA256

25ea8ae69503597bc18ef28863e679352de5e2822331fccf03c3ec51b395aa37
SHA512

819ea566deaa94491320cb0cd13611ea43487743ad1e636b301392f579da850475196d1c0aa6bc681e986f3c8522466e06ccd590dd66c91fa10c70821300084b
SSDEEP

12288:kz8zDgToZWp6bGI5u43k2aRZrDqaxvb8RwtBAvsyQ4S+/XFN2sceoWvY9Y3NHLJq:uEOFkx5Uegv4m+VQ45NN2sceoWvaY3

Score

N/A

Malware Config

Signatures

Files

25ea8ae69503597bc18ef28863e679352de5e2822331fccf03c3ec51b395aa37
.exe windows x86

f7e4e842586bc3806946eb18c2764796

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentDirectoryA
CompareStringW
GetProcessHeap
GetTimeFormatA
lstrcatA
lstrcmpW
GetEnvironmentVariableW
VirtualFree
ReadConsoleW
GetModuleHandleA
GetFileType
GetVolumeInformationA
GetSystemTime
GetPrivateProfileIntW
WriteFile
GetLastError
CreateMailslotW
VirtualProtectEx
GetDiskFreeSpaceW

dmdskmgr

DllRegisterServer
DllGetClassObject
?namecmp@@YGHPBG0@Z
DllCanUnloadNow

Sections

.text
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 798KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ