e2c75558aa8cd92d6468dd9ce432b5bf89091245d2ad4daf6ec4751320f0091a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2c75558aa8cd92d6468dd9ce432b5bf89091245d2ad4daf6ec4751320f0091a
Size

309KB
MD5

0981693ed5c856421a2a65fa13eea940
SHA1

19989ad8e1c9f33cbb4993fba8d6d816e1a0b712
SHA256

e2c75558aa8cd92d6468dd9ce432b5bf89091245d2ad4daf6ec4751320f0091a
SHA512

bbf8a6ad3597b610f15f6ab877faa6470be47b4e20613ca632eac7cccc58af6c02d1cedbbef331e7dc7e3871e845f9f615c3d0c524e0e3ad92efec54bcc88b57
SSDEEP

6144:ZBC7TJOldmKFX31+rMEZqKae/abgdAsl7W54KA5eNMYKxtv:Zo7Yldgwixaq79KA5e65H

Score

N/A

Malware Config

Signatures

Files

e2c75558aa8cd92d6468dd9ce432b5bf89091245d2ad4daf6ec4751320f0091a
.exe windows x86

a9d4f5fbaa5680a380ac66d6d0d84c58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
WaitForSingleObject
InterlockedIncrement
WriteFileEx
FindResourceW
GetDiskFreeSpaceW
Heap32First
InterlockedDecrement
GetPrivateProfileIntA
GetExitCodeProcess
GetModuleHandleW
GetACP
GetDiskFreeSpaceW
GetPrivateProfileSectionA
GetLongPathNameA
GetStringTypeW
LoadLibraryA
lstrcpyW
lstrcmpA
ExitProcess
SetEnvironmentVariableA
GetCurrentDirectoryA
GetPrivateProfileIntA

apphelp

ApphelpCheckIME
ApphelpCheckExe
SdbCreateMsiTransformFile
AllowPermLayer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE