cea0b903a4287ff2873055db41f7a4abec333b181f988546752f1f7e51b9e905 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cea0b903a4287ff2873055db41f7a4abec333b181f988546752f1f7e51b9e905
Size

3KB
MD5

40b5dac2378fe8acf391ee726884f850
SHA1

e40e6c3e0cf6e45ed233deabf0829f53a853083b
SHA256

cea0b903a4287ff2873055db41f7a4abec333b181f988546752f1f7e51b9e905
SHA512

fc199bab7a833587a0eeec274bdefe7832732501a7ae1108901a67be6a2744ce06e9b9f889c89042f1c5eddee20ca23d91e935208cc662b73198f8f987a4030d

Score

N/A

Malware Config

Signatures

Files

cea0b903a4287ff2873055db41f7a4abec333b181f988546752f1f7e51b9e905
.exe windows x86

4592a51e6fe78d18da25a5d94b0153f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
GetCommandLineA
ExitProcess
CloseHandle

advapi32

CreateProcessWithLogonW

Sections

.text
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ