5a2059c9967c56355bd2eb3fc73c98dddbb2e130ee5939c18b595a33a9a30b4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a2059c9967c56355bd2eb3fc73c98dddbb2e130ee5939c18b595a33a9a30b4f
Size

83KB
MD5

8fea7bbc4fa853ba141c0bc175f7985e
SHA1

6d6f529300415a8f2e1dfc5c2bf8f9eddd49da98
SHA256

5a2059c9967c56355bd2eb3fc73c98dddbb2e130ee5939c18b595a33a9a30b4f
SHA512

2e79af34e20a57daef08e04556267d96f72d2c74ac9ff56c6b00c789ff8a24ef6060ca120fd42fe478da6fad4db379f2d392f7e44ee0cdd6ca663a576ba586fa
SSDEEP

1536:w0HcwnWlpJBU+7e6buOv19Yvo+I3Kkil9pjVrs2ryrd1vUQuqHiw:VHfNMpbiC3Kke9Hs2qJi

Score

N/A

Malware Config

Signatures

Files

5a2059c9967c56355bd2eb3fc73c98dddbb2e130ee5939c18b595a33a9a30b4f
.exe windows x86

ac0678148c0c37b2632e2df7a1f42e0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
VirtualLock
GetCurrentConsoleFont
FlushFileBuffers
HeapUnlock
BackupRead
GetExitCodeProcess
MapUserPhysicalPages
EnumSystemLanguageGroupsW
GetPrivateProfileStringA
GetConsoleInputExeNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE