65119209[.]exe | Triage

Sharing

General

Target

65119209.exe
Size

5.2MB
MD5

32c5693987d03d80ea5d7d5632769cb8
SHA1

e8c8a465e6d6912afc99bbdf90cf08363cf184e4
SHA256

5b3608236eb01a9812bc32ca81bf7493c374f854ba7dd40fb422a7ff8b03ed67
SHA512

7948d57c378ed69531ba75059af8a17e5b9c3ee256c5c742d93d9f94c4c438a4845c5df8ab672aaba4ca1b8fdeb155b57b6753e438b3fde47d0490cd8b6ff11a

Score

N/A

Malware Config

Signatures

Files

65119209.exe
.exe windows x86

140094f13383e9ae168c4b35b6af3356

Code Sign

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ