44f44bbd1e69a18013a96a5e45d0c6ca0e5a9a2903d88e43b3b9fc2a587e1eb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44f44bbd1e69a18013a96a5e45d0c6ca0e5a9a2903d88e43b3b9fc2a587e1eb8
Size

816KB
MD5

79c76db1187e29810b05f60cff5fb78c
SHA1

e6a86d592a4904ee5a4da00eeb5af0c8037dfe70
SHA256

44f44bbd1e69a18013a96a5e45d0c6ca0e5a9a2903d88e43b3b9fc2a587e1eb8
SHA512

2081c5d347f2597758d3900e6c80add14d99a5bdabf3ae9dad1070cfe4d58ffa826719a601248b145cca01a86e7d94d0e991cba4fb6af74a8717d282809f5929
SSDEEP

24576:vmx+M5BpaRCpGgp90JwL+ZO4o6M72QjMWEFXv:OxT5BpaR4Ek+ZVSaor

Score

N/A

Malware Config

Signatures

Files

44f44bbd1e69a18013a96a5e45d0c6ca0e5a9a2903d88e43b3b9fc2a587e1eb8
.exe windows x86

85edd3651ba1a1b72b5a04e30601b760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpynA
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA
FormatMessageW
GetPrivateProfileIntA
CreateDirectoryW
lstrcpynA
GetCurrentThreadId
OpenMutexW
lstrcpynA
VirtualProtect
lstrcpynA
GetCurrentDirectoryA
DeleteFileW
lstrcpynA
GetCommandLineA
lstrcpynA
lstrcpynA
lstrcatA
ReadFile
GetFileSize
SetThreadPriority
WriteConsoleW
VirtualFree
GetModuleHandleA
lstrcpynA
lstrcmpA
TlsGetValue

certcli

CAEnumFirstCA
CADeleteCertType
CADeleteCA
CAEnumNextCA

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE