5c296f4f55459664af87014849f11476e961a43e05e767787eeb6d2df591e22e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c296f4f55459664af87014849f11476e961a43e05e767787eeb6d2df591e22e
Size

56KB
MD5

6dd94c8019c5d89b42c350942c19fc00
SHA1

bc21f0c2b9376bc865259b93b0fa65a72f5f7b21
SHA256

5c296f4f55459664af87014849f11476e961a43e05e767787eeb6d2df591e22e
SHA512

7a323e9063d959a665ab8bd656d717687ac4576b0a6ebd387dbea34f189c18c163291add0345c7c49eb8ac81d1ee165a37bdc97a1756149ff568700a03597418
SSDEEP

1536:WIF8cUW2sO5/4TaCiGa4T3EhMusrS0jOwZis/oG1r:WI/U5sO5AT7TP3EhMus+8i9Gl

Score

N/A

Malware Config

Signatures

Files

5c296f4f55459664af87014849f11476e961a43e05e767787eeb6d2df591e22e
.exe windows x86

44159c381f5b823fd0d83ac1d75bd00a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyLZFile
GetSystemPowerStatus
FormatMessageW
SetConsoleOS2OemFormat
OpenThread
GlobalFix
TerminateJobObject
CreateActCtxW
EnumSystemLocalesA
GetVolumeNameForVolumeMountPointW
InitAtomTable

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE