04ab2f691dfb18b6a1bf683d77a5afe96e3de57a4f31bcf13d5366d7c8d3990d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04ab2f691dfb18b6a1bf683d77a5afe96e3de57a4f31bcf13d5366d7c8d3990d
Size

307KB
MD5

c8703eccb57ef7c84c5c205d7156a39c
SHA1

cb17dd1feedd7e95f60d63bcbb1de3e04114ebc1
SHA256

04ab2f691dfb18b6a1bf683d77a5afe96e3de57a4f31bcf13d5366d7c8d3990d
SHA512

0916c435a0ec5c7c29e94a65dec745c06cb941204dc5050f3218746f2d7bc8788a6d1ffc82d92cb85baeb62cb7c3309d56015dba62b80be84e59575245ea5b19
SSDEEP

6144:PVce/Xb3K279tb5CIjebhqEBVOPuiyENqnHXkS7qHL/h2jB:NcePNJtVZebhdyuOcu7h2

Score

N/A

Malware Config

Signatures

Files

04ab2f691dfb18b6a1bf683d77a5afe96e3de57a4f31bcf13d5366d7c8d3990d
.exe windows x86

47495853aa68cf757fe6a7173c91ace1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FormatMessageA
GetDiskFreeSpaceA
GetStringTypeA
GetModuleFileNameW
SetCurrentDirectoryW
TlsGetValue
TlsFree
DeleteFileW
VirtualFree
lstrlenA
GetModuleHandleA
GetCurrentThread
GetLocaleInfoW
lstrcpynW
GetNumberFormatW
GetPrivateProfileIntA
GetFullPathNameW
CreateEventW
VirtualProtect

wmadmod

DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer

Sections

.text
Size: 13KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 291KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE