0d5c8fd77e89139d2e3ef45e228f1475ddc1e5940849870838ec5e9448e6daa5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d5c8fd77e89139d2e3ef45e228f1475ddc1e5940849870838ec5e9448e6daa5
Size

830KB
MD5

61df262f7bb5634c02a2617727d85b11
SHA1

dfbc32cd9a74b47f1211c119e8e6feef4263bea5
SHA256

0d5c8fd77e89139d2e3ef45e228f1475ddc1e5940849870838ec5e9448e6daa5
SHA512

41445ca727d1c980002c9ea7f728a93fbced4f3fd34808b51f8127cbeb893c7e9472ad3d6b193ec481315dd017afd857a2ed505339dca6f54c0da8d525b6bd24
SSDEEP

12288:iwBEFMchQ6aCR/QOI3nF6IYT0BX4fdOMQiVtAYyR6L2kvtvDhS0E7DOBWSz:iw2MchGCVI3n1JXqpHxL2kvFwV+Bz

Score

N/A

Malware Config

Signatures

Files

0d5c8fd77e89139d2e3ef45e228f1475ddc1e5940849870838ec5e9448e6daa5
.exe windows x86

5b32a905ee2b1e18582e2db08a73fc7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
CreateSemaphoreW
GetModuleHandleA
GetDiskFreeSpaceA
GetConsoleTitleA
LeaveCriticalSection
FindNextFileW
GetCommandLineA
CompareStringA
SetEvent
EnumResourceNamesA
GetTickCount
MoveFileExA
EnumCalendarInfoA
GetLocaleInfoA
GetCurrentProcess
WaitForSingleObject

esent

JetTruncateLog
JetStopService
JetUpdate
JetTerm

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ADATA
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ