5c6918d19e7f799c90e5b3d48dee244c264405c2d125225f60675df2b434b4c2[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c6918d19e7f799c90e5b3d48dee244c264405c2d125225f60675df2b434b4c2.bin
Size

3KB
MD5

c001c273f793ac01a89f5c95f34e0e01
SHA1

ea53f254b14b9475a47a53c1bda80099b841aa6e
SHA256

5c6918d19e7f799c90e5b3d48dee244c264405c2d125225f60675df2b434b4c2
SHA512

86d8552e9892f6268890440717683c51a2a901035b8d665c14f1025852ae7245671900fcdec362308295a6e6e1d82aedf0684d64e96f32ed9662298a3a39af0f

Score

N/A

Malware Config

Signatures

Files

5c6918d19e7f799c90e5b3d48dee244c264405c2d125225f60675df2b434b4c2.bin
.exe windows x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ