a5605ce0c9dd1652a9ace5e2bbbec837969be05823dab4f548db97f3252297be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5605ce0c9dd1652a9ace5e2bbbec837969be05823dab4f548db97f3252297be
Size

76KB
MD5

00718105c372bc3349590e0b6dab7aa0
SHA1

ead8f78adf3fe88c01ffcf2af1a878fdd8a772ab
SHA256

a5605ce0c9dd1652a9ace5e2bbbec837969be05823dab4f548db97f3252297be
SHA512

d7773123457e9b4c7c16b74007d03a90bf6336cf9bcd90b7f2c816aa7867ea1ffd79013f2bec09b2a897f0b9957f6c71054fd7797769161da40ed815166f21b5
SSDEEP

1536:UtpHFGc4S920M2cGZ1qwVvIvWiy+y5vgpjVrs2ryrd1vUQuq6:UTFGc4S9LPqwVw+dSHs2qo

Score

N/A

Malware Config

Signatures

Files

a5605ce0c9dd1652a9ace5e2bbbec837969be05823dab4f548db97f3252297be
.exe windows x86

8f99fd22b2e56e9ee33a09d4605e970d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiberEx
FindVolumeClose
HeapCreate
LZOpenFileA
GetSystemWindowsDirectoryW
ExtendVirtualBuffer
VDMOperationStarted
BeginUpdateResourceA
WriteConsoleW
GetConsoleAliasExesA
LZStart

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE