3a8bd003d60d2bdd643772773c5f3797a3fe4c2e438154924a26980199e5c82a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a8bd003d60d2bdd643772773c5f3797a3fe4c2e438154924a26980199e5c82a
Size

818KB
MD5

774ed722c31f1472458902607c375d3e
SHA1

ae6a9fc82cce20c5b98c29d54bd43fc004f02bf7
SHA256

3a8bd003d60d2bdd643772773c5f3797a3fe4c2e438154924a26980199e5c82a
SHA512

a8cc1dfda2a48e710ef6333e8f1692ef606d36d146603bcff3cf49c18ccaf2fccdaed2872c1fbd07bb0ab19fdb5ff8181dd3eba9cc01e4db8095c00327d137ff
SSDEEP

24576:TS+vzRt/fkDEAVH7/o5wloW4CaE1VsrJ:TSwAuOlo0auVc

Score

N/A

Malware Config

Signatures

Files

3a8bd003d60d2bdd643772773c5f3797a3fe4c2e438154924a26980199e5c82a
.exe windows x86

24a045fd87e57f83d97c7c7adfac1179

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
WriteFile
lstrcpynA
GetModuleHandleA
lstrcatA
ReadConsoleA
OpenMutexW
GetCurrentThreadId
GetCurrentDirectoryA
lstrcpynA
VirtualProtectEx
VirtualFree
GetVolumeInformationA
Heap32First
GetSystemTime
lstrcpynA
FindFirstVolumeA
lstrcpynA
GetDiskFreeSpaceW
lstrcpynA
GetDriveTypeA
lstrcmpW
lstrcpynA
lstrcpynA
lstrcpynA
GetFileType
lstrcpynA
SetThreadPriority
lstrcpynA

cmdial32

InetDialHandler
RasCustomDialDlg
AutoDialFunc
RasCustomDial

Sections

.text
Size: 18KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ