51e4e8257aaf7d7535f1889d55922ae3e878c1687d98f03fcbfac7bb2d59d4b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51e4e8257aaf7d7535f1889d55922ae3e878c1687d98f03fcbfac7bb2d59d4b7
Size

60KB
MD5

834027bf266da438928eb56c4bfeab01
SHA1

9dbbe0d73f25905d4f5c5ea9a8925a48c63ad077
SHA256

51e4e8257aaf7d7535f1889d55922ae3e878c1687d98f03fcbfac7bb2d59d4b7
SHA512

460d07c049e846c09657bf6498e3c30da387135d67ff180f0f59d369016372bc3b7e6f0c2a157f877d0f339fe17968fd41b3b14ea034e127ee00a0663f547b6b
SSDEEP

1536:Z3oE2Il5hZuMQZaj/vX5+o5PDLnTR33gSkAa:aEXl5hMMN5bLnTR33gSD

Score

N/A

Malware Config

Signatures

Files

51e4e8257aaf7d7535f1889d55922ae3e878c1687d98f03fcbfac7bb2d59d4b7
.dll windows x86

93fab0ca880e087873231906613abdb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
HeapReAlloc
HeapDestroy
OpenEventW
FindResourceExW
FindResourceW
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
PulseEvent
OpenSemaphoreA

rpcrt4

NdrAsyncServerCall
NdrServerCall2
RpcStringFreeW
RpcServerInqBindings
RpcServerUseProtseqW
RpcAsyncCompleteCall
UuidFromStringW

Sections

.code_01
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ