297b415ebcf14ffee64ee5ecd43382bb44222be8dcb188cd02294c7c792325b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

297b415ebcf14ffee64ee5ecd43382bb44222be8dcb188cd02294c7c792325b0
Size

818KB
MD5

ba80a3a833ce09f75fec0431e052ada8
SHA1

fd5996bcafdf3c9fda6c17d3a207ceb4281fbfbf
SHA256

297b415ebcf14ffee64ee5ecd43382bb44222be8dcb188cd02294c7c792325b0
SHA512

0723d5429474a787f803e04b1e8a2517cb358d17177e987554e54c217c4ceb4d0a87945f3f38ba7bfee489700024af95343c8c2499a8becd81b92a4a80460049
SSDEEP

12288:vYZLzaad2T1ihNv4EBrwUEODHWiojNK4t03P/dWDK696ptL33P6H3:vMLza62T1ihNPNP2igtYP/doXiHCH

Score

N/A

Malware Config

Signatures

Files

297b415ebcf14ffee64ee5ecd43382bb44222be8dcb188cd02294c7c792325b0
.exe windows x86

cfc7339174659db58e6bf836d25b4151

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
VirtualProtectEx
lstrcmpW
GetDiskFreeSpaceW
lstrcpynA
lstrcatA
GetFileType
GetVolumeInformationA
ReadConsoleA
SetThreadPriority
Heap32First
lstrcpynA
GetDriveTypeA
lstrcpynA
lstrcpynA
lstrcpynA
WriteFile
OpenMutexW
GetPrivateProfileIntA
lstrcpynA
FindFirstVolumeA
lstrcpynA
GetModuleHandleA
lstrcpynA
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
VirtualFree
GetCurrentThreadId

cmdial32

InetDialHandler
AutoDialFunc
RasCustomDial
RasCustomDialDlg

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ