29d75e5fb9574de7d9754f89ddb1c1976217399e513e37fd9975483bd1c7cb6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29d75e5fb9574de7d9754f89ddb1c1976217399e513e37fd9975483bd1c7cb6d
Size

818KB
MD5

091b7cccfad49fa4697b497f806c5fd0
SHA1

23ffe8b454a77f729cc308c41d8e33a2e984fa00
SHA256

29d75e5fb9574de7d9754f89ddb1c1976217399e513e37fd9975483bd1c7cb6d
SHA512

974f301446f29407cfdcc2eb3e42f12a1027a7f4f1872fd492b5942adf16127fec15147811147494fc8c3c517ccc0bcf99cdeaf69667f69126826576c7224c82
SSDEEP

12288:d/wVoHeQFk78g814Lii4TWjpSUSa1DztyXMC/Osn/1UzPLcbKTDvCcECi16:ElQWQN1U1V/Z4cEz/1UzTcyCc

Score

N/A

Malware Config

Signatures

Files

29d75e5fb9574de7d9754f89ddb1c1976217399e513e37fd9975483bd1c7cb6d
.exe windows x86

66322ebcb2e7aadeba0e72331cccbb70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
WriteFile
lstrcmpW
lstrcpynA
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
lstrcpynA
GetSystemTime
SetThreadPriority
ReadConsoleA
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA
Heap32First
lstrcatA
lstrcpynA
FindFirstVolumeA
GetModuleHandleA
GetPrivateProfileIntA
VirtualFree
GetCurrentDirectoryA
GetCurrentThreadId
VirtualProtect
lstrcpynA
lstrcpynA
OpenMutexW
GetFileType
lstrcpynA

comuid

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ