f4382756240a73170c815d306ab4ab449cb33d5231578c562d21dfcd0a313633 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4382756240a73170c815d306ab4ab449cb33d5231578c562d21dfcd0a313633
Size

818KB
MD5

136a739ba9dad4fcfcf055d4b0d1f650
SHA1

637dea04b5ed8f9196b2e946074272c87f2a6d68
SHA256

f4382756240a73170c815d306ab4ab449cb33d5231578c562d21dfcd0a313633
SHA512

61c5e1aab139cb137718afad65c82ffd5ffbd3436391b47ba6c91637ba2bff749948a607483f5231d5f10c95d555b58acd6eead4cddbd20892dc2ce49eef0c6d
SSDEEP

12288:scdeJUoZ3N2rcpGzU7alxNA9G6HCv76ryX0XzD6tFm6/bOHT2F5ghY2SWAUzE7Ec:sVv5N2jg4A92gXzD6bqHC6vSbsCEiq/

Score

N/A

Malware Config

Signatures

Files

f4382756240a73170c815d306ab4ab449cb33d5231578c562d21dfcd0a313633
.exe windows x86

0f32618c7c9173eec1588245086b33e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
lstrcpynA
lstrcatA
lstrcpynA
lstrcpynA
lstrcpynA
GetSystemTime
SetThreadPriority
FindFirstVolumeA
GetVolumeInformationA
VirtualFree
lstrcpynA
Heap32First
GetModuleHandleA
GetDiskFreeSpaceW
WriteFile
lstrcpynA
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
GetFileType
GetCurrentDirectoryA
GetCurrentThreadId
lstrcmpW
lstrcpynA
ReadConsoleA
lstrcpynA
OpenMutexW
VirtualProtect

comuid

DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ