4cd5ea30911641f59215ba1466f7a865daa83376794eedcca635c60bb52ab1ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cd5ea30911641f59215ba1466f7a865daa83376794eedcca635c60bb52ab1ec
Size

56KB
MD5

d879752e943a332445f2e6879bbd09cc
SHA1

a0f3184eb5c3c8a0fb475b410f43a811aec5c4db
SHA256

4cd5ea30911641f59215ba1466f7a865daa83376794eedcca635c60bb52ab1ec
SHA512

4a81b1aaf20c3277634224906ef145cb21e55556c3c1c982d331e051e58fa6c9e7bb72ebefca80d7aaa66c729778d13ff47157c22d9f89bc553e5b82e954fca8
SSDEEP

1536:aRlHaVAgnLOkiHgO2nLjyCdjpHCVhHbiKYX63ouGhEUZ/:KKLoYnLjyCchfGhB/

Score

N/A

Malware Config

Signatures

Files

4cd5ea30911641f59215ba1466f7a865daa83376794eedcca635c60bb52ab1ec
.exe windows x86

6e1a09ecd4c99344c01a47eadb3d356b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
CreateActCtxW
LoadModule
DeleteVolumeMountPointW
EnumDateFormatsExW
InterlockedIncrement
GetCommConfig
GetFileInformationByHandle
OpenConsoleW
SetThreadLocale
DuplicateHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE