001dfc5f23d5c8ddd4ab30f371432491[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001dfc5f23d5c8ddd4ab30f371432491.exe
Size

117KB
MD5

001dfc5f23d5c8ddd4ab30f371432491
SHA1

1500a8906b5bbf256cf929f2da4e1ef13d27b956
SHA256

35bc24a2561769e8385649c8c06829aeec6801611f32b22c3a79ab76667ff56d
SHA512

64c03c0b78e8d50d98b79b0f834d14525b9d0d7eac45532b502db44980af3f7ed16921d5963818cc79c5164c3e0fd66caf6accfb8fd464a76953a74839a70b0a
SSDEEP

3072:8GGBFzrSuX3N6LGZUvBK53FFKC8lm2Rx/lum8ClZ7u1Ivu35Gy8Vij:8GGmunN6nKFFkhlmWZoNmtu1IvM59z

Score

1^/10

Malware Config

Signatures

Files

001dfc5f23d5c8ddd4ab30f371432491.exe
.exe windows x86

8e250e78e5ed457cb0b744b490d83357

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
Sleep
SetLastError
TlsFree
EndUpdateResourceA
HeapCreate
lstrcmpiA
GetPrivateProfileStringW
lstrcmpiA
CreateWaitableTimerW
GetBinaryTypeA
FileTimeToLocalFileTime
lstrcmpiA
GetModuleHandleA
GetTickCount
lstrlenA
lstrcmpiA
lstrcmpiA
GetStdHandle
GetExitCodeProcess
IsValidCodePage
GetLogicalDrives
CreateNamedPipeA

objsel

DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ