c5149bfce31d9dae3621a2ca53b5baba2428eb5a44594972a89e72a7dd91a3c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5149bfce31d9dae3621a2ca53b5baba2428eb5a44594972a89e72a7dd91a3c4
Size

56KB
MD5

63670a86b89e76ca7525d27031634ef0
SHA1

a439d49d7ab023d7c06c950398a76f7e1fc41b24
SHA256

c5149bfce31d9dae3621a2ca53b5baba2428eb5a44594972a89e72a7dd91a3c4
SHA512

91ca548a920c063c6568d434a89834ca667424ff78e427a5c0b496407a264094c62d47cecee736aef3cbbe799c8b641c94f7cd8d98b223e1d11cb20f31ddfdbe
SSDEEP

1536:Jgg3l2ihNmC3MYHL3ZAeu7fPqqLc3g9LYR4Ksaume:J7lxhNmIM6L3ju7X1LcQ9LY5BDe

Score

N/A

Malware Config

Signatures

Files

c5149bfce31d9dae3621a2ca53b5baba2428eb5a44594972a89e72a7dd91a3c4
.exe windows x86

ff4f386374e870e606163c5f1dd8af32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeMountPointW
ReadConsoleInputW
GetProcessShutdownParameters
CreateActCtxA
VerLanguageNameA
DnsHostnameToComputerNameW
lstrcat
CreateSemaphoreA
TransmitCommChar
IsBadStringPtrW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE