c18e5aeebfcfe20f99c6c4cbc9fbf5c3f2ad6fb33d3cc08c170131c13356140b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c18e5aeebfcfe20f99c6c4cbc9fbf5c3f2ad6fb33d3cc08c170131c13356140b
Size

879KB
MD5

62d761a9fc026dd17a6046c136999551
SHA1

e3abe83f5264504f40d5aaef21c57a8460895238
SHA256

c18e5aeebfcfe20f99c6c4cbc9fbf5c3f2ad6fb33d3cc08c170131c13356140b
SHA512

4a4d85c7593fe2d5d3fda45f5775b260e8d098acee450839c612e6122f14a5a289dbc9c33f60b19dccb061839983c995622746c4c2b5ddcb71148050de98db6e
SSDEEP

12288:UmB1fNDUXk2OAlDC7Bz1Vlkn6O6PP+KOQLe4VWvoQZbQl3TF7mQzuHrxNrU:1j1DxjyHn6O6PPpvC4VW5bQNlmQgxNr

Score

N/A

Malware Config

Signatures

Files

c18e5aeebfcfe20f99c6c4cbc9fbf5c3f2ad6fb33d3cc08c170131c13356140b
.exe windows x86

b99975348ab9e5fd3d2fc2ce13976182

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetEndOfFile
Heap32First
GetTickCount
SetEndOfFile
SetEndOfFile
VirtualProtect
GetModuleFileNameA
SetEndOfFile
GetStdHandle
SetEndOfFile
LoadLibraryA
CreateEventW
GetStringTypeW
GetFileAttributesA
lstrcatA
OpenEventA

wmp

DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 869KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE