12aee1c61586478ed9279e7fdfe6ec235fd286639bd16469ff93563e77fae3ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12aee1c61586478ed9279e7fdfe6ec235fd286639bd16469ff93563e77fae3ba
Size

818KB
MD5

0408672fa2f7049075aff1908149810f
SHA1

c8b200301d8f26d992aa3cc668a82de36799afcb
SHA256

12aee1c61586478ed9279e7fdfe6ec235fd286639bd16469ff93563e77fae3ba
SHA512

ef460c3875979dd281bc7b526b0e77b0eac5831b6a9690f6d7cb8363f5c3053f086f0d260c2b391bb75ccf12ff3ce5daa5c11441c298ff2f1546908152f64636
SSDEEP

24576:xBsZo0tPOSpzPTQqnYKNAzvFStR463TkQ:xqZZOSpzPvZa8H4IgQ

Score

N/A

Malware Config

Signatures

Files

12aee1c61586478ed9279e7fdfe6ec235fd286639bd16469ff93563e77fae3ba
.exe windows x86

2cd095d7940715945ee560fed1d49df1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
OpenMutexW
WriteFile
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
GetVolumeInformationA
Heap32First
lstrcpynA
ReadConsoleA
SetThreadPriority
GetCurrentThreadId
GetModuleHandleA
lstrcpynA
lstrcmpW
lstrcpynA
lstrcatA
GetDiskFreeSpaceW
VirtualFree
GetPrivateProfileIntA
FindFirstVolumeA
GetDriveTypeA
GetSystemTime
lstrcpynA
VirtualProtectEx
GetFileType
GetCurrentDirectoryA

cmdial32

AutoDialFunc
InetDialHandler
RasCustomDial
RasCustomDialDlg

Sections

.text
Size: 18KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ