5037549ff080b1773d16b1fd74d854c0e9e04006de076ebb6803a918b3e892c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5037549ff080b1773d16b1fd74d854c0e9e04006de076ebb6803a918b3e892c1
Size

115KB
MD5

6ceddb073afcfbf489e8cd44119aa0f0
SHA1

31d68276e60d5d296b95886eb8efdda0a4bb8069
SHA256

5037549ff080b1773d16b1fd74d854c0e9e04006de076ebb6803a918b3e892c1
SHA512

6e654ed158fefd9920ff3b100c4d5f8ddb106d3d4d35cb9333612eae61e83faeb152b95596238f0df5cc8875ad1e97217af17c7dbcfceca39cd1d3a55e9df4c9
SSDEEP

3072:oUBZMMMt5Dk9fRHCCfCsSH21x3jBkMqhGKZTbzsRg:PCA9xCazibZL+

Score

N/A

Malware Config

Signatures

Files

5037549ff080b1773d16b1fd74d854c0e9e04006de076ebb6803a918b3e892c1
.exe windows x86

f1d80f39a033d7cfe70073ed1ac9c614

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFileW
DelayLoadFailureHook
GetCurrentProcess
GetShortPathNameW
LocalReAlloc
GetTempPathW
RtlCaptureStackBackTrace
QueryMemoryResourceNotification
UnregisterWaitEx
SetDefaultCommConfigA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 59KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE