d42166fa94370d75129f51f1e5f7ec2c8f62480808bbecd8f889da7fac4c33a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d42166fa94370d75129f51f1e5f7ec2c8f62480808bbecd8f889da7fac4c33a3
Size

397KB
MD5

35a0db292bbfad079f51903b4b14b5d0
SHA1

e624a49bcbf7eb5dda0a5a1ec803f276f0aa36b0
SHA256

d42166fa94370d75129f51f1e5f7ec2c8f62480808bbecd8f889da7fac4c33a3
SHA512

97958bc9b67e544b2354afa0d0a7963bd4e5acedbde7f45a70cb0626b23350ef3db3b697b924f507767e352f892124a07b462281a92bbb222776a34fc42dec39
SSDEEP

12288:vyO7HyKJGu3eenqg4fNUEcaSKpzYrfAM5p:uKcg4aafpzYrfd

Score

N/A

Malware Config

Signatures

Files

d42166fa94370d75129f51f1e5f7ec2c8f62480808bbecd8f889da7fac4c33a3
.exe windows x86

8384ed71e5fdc957c9007dce20a3eb60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
Heap32First
InterlockedDecrement
GetDiskFreeSpaceW
WriteFileEx
InterlockedIncrement
GetACP
SetEnvironmentVariableA
GetExitCodeProcess
LoadLibraryA
GetPrivateProfileIntA
GetPrivateProfileIntA
lstrcmpA
ExitProcess
FindResourceW
GetCurrentDirectoryA
GetModuleHandleW
GetLongPathNameA
GetPrivateProfileSectionA
WaitForSingleObject
GetDiskFreeSpaceW
lstrcpyW
GetStringTypeW

apphelp

ApphelpCheckIME
SdbCreateMsiTransformFile
ApphelpCheckExe
AllowPermLayer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 492KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ