5c537f1d65b51b4040fd8753a3079412ceef8635c33d2b1548dc74875106dd01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c537f1d65b51b4040fd8753a3079412ceef8635c33d2b1548dc74875106dd01
Size

63KB
MD5

443e835214af109eca47c1e1835be0cd
SHA1

813230aa2a8f8ccbe5505497dbf9cfc8bfa5fde9
SHA256

5c537f1d65b51b4040fd8753a3079412ceef8635c33d2b1548dc74875106dd01
SHA512

0c73e8c47a04cbc39403e3891c9887c5275c4f19827b56d1295dfc3d532159e3818413703dcb4ac033cc0f307e11aa0736a28275ec134938ce16ec5969f84442
SSDEEP

1536:eeb6prw8mVxYpjoC0dvBhPKTuebaMGXXPaFOQO8GdUaEzs2ZU1+:eMguhUgSFELEz9Y+

Score

N/A

Malware Config

Signatures

Files

5c537f1d65b51b4040fd8753a3079412ceef8635c33d2b1548dc74875106dd01
.exe windows x86

bf17f412bce6e0d6ef19299f65f49e65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
GetPrivateProfileSectionW
OpenThread
FindFirstFileExW
VirtualQueryEx
GetProcessAffinityMask
VerifyVersionInfoA
ExpungeConsoleCommandHistoryW
PrivCopyFileExW
GetStartupInfoW
CallNamedPipeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE