cfa529b01a35a6f1a1ab880778e6fb731ee3a812467f98fb281fee7f19736f3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfa529b01a35a6f1a1ab880778e6fb731ee3a812467f98fb281fee7f19736f3e
Size

309KB
MD5

29dbd1c2464c1c757324a1e500976cf0
SHA1

1edd979542ae854526d9716cecc4e206be29cee8
SHA256

cfa529b01a35a6f1a1ab880778e6fb731ee3a812467f98fb281fee7f19736f3e
SHA512

07d3bc3dddbee239aa0d66b0e3da6ab3a88f5e63138e2c1f221375ae6eb56070b98587cf2ba01733dec01f55acd3491396617b3486f6a04a298ac3d75ea6afcb
SSDEEP

6144:y2DzJbO7s63Cf6QBnOHC7KuBSBX5egsneaSRGNPbgddCjj1/Z8PiZoDwaB1:HzFCSnOHa0nepnnnNaCjxh84UwaB1

Score

N/A

Malware Config

Signatures

Files

cfa529b01a35a6f1a1ab880778e6fb731ee3a812467f98fb281fee7f19736f3e
.exe windows x86

23396ba40bb074eaa5684514f22493cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32First
SetEnvironmentVariableA
GetPrivateProfileIntA
FindResourceW
GetDiskFreeSpaceW
WaitForSingleObject
GetPrivateProfileIntA
lstrcmpA
lstrcpyW
GetLongPathNameA
InterlockedDecrement
GetDiskFreeSpaceW
ExitProcess
GetStringTypeW
WriteFileEx
InterlockedIncrement
GetExitCodeProcess
LoadLibraryA
GetPrivateProfileSectionA
GetACP
GetCurrentDirectoryA
GetModuleHandleW
VirtualAllocEx

apphelp

ApphelpCheckExe
AllowPermLayer
ApphelpCheckIME
SdbCreateMsiTransformFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE