da37ffb728eb5a76fe0099f9e6012aeaf6e2e72852f13dd6860aa42e7706f2fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da37ffb728eb5a76fe0099f9e6012aeaf6e2e72852f13dd6860aa42e7706f2fe
Size

817KB
MD5

ea96e4ceb7fcf236dd4cdc427445d0b8
SHA1

86298b28e9f804612f4ec4ba1e5c0d1b3d9309e3
SHA256

da37ffb728eb5a76fe0099f9e6012aeaf6e2e72852f13dd6860aa42e7706f2fe
SHA512

ad77bde1af1fcfb29120cb6fa8c7f92e8a79d6d00f34d2b4b870c47830a5bdbb1c598c07460a7beb944453bcfdec936226fa0df450449086124edb4eee6dc871
SSDEEP

24576:x3NIX6Jr/Bm77V03Ykf6s4UIifGAD4w1JJPTKUn:lNIKJr2SYkvVIiB1JJT

Score

N/A

Malware Config

Signatures

Files

da37ffb728eb5a76fe0099f9e6012aeaf6e2e72852f13dd6860aa42e7706f2fe
.exe windows x86

88ed3dac1b7fe4dfb1bddce6e9d57170

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetFileSize
ReadFile
GetCurrentThreadId
lstrcpynA
lstrcmpA
lstrcpynA
lstrcpynA
lstrcpynA
GetModuleHandleA
lstrcpynA
GetCommandLineW
OpenMutexW
GetFileType
lstrcatA
GetCurrentDirectoryA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
GetDiskFreeSpaceW
ReadConsoleA
VirtualProtectEx
VirtualFree
DeleteFileW
GetPrivateProfileIntA
lstrcpynA
CreateDirectoryW
SetThreadPriority
FormatMessageW

certcli

CAFindByCertType
CADeleteCertType
CAEnumNextCA
CAEnumFirstCA

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ