5c2ab8a6fb9e3f075e11faeeb21526aca138e4999d592585eb025d51b92015f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c2ab8a6fb9e3f075e11faeeb21526aca138e4999d592585eb025d51b92015f0
Size

396KB
MD5

04a3d2ed7a1e61d89224f120b0e2e350
SHA1

0bcad2c5adb0e151ccaedbd400fd46f80b09cdac
SHA256

5c2ab8a6fb9e3f075e11faeeb21526aca138e4999d592585eb025d51b92015f0
SHA512

d0ee18e5856ea66273d80d671b0dde78f3af19b8e826f83948bae34d31054ce0de1bc5adef19a50217c085ef35e2af72a5c279e8fa220ea5dfec78d8303260b1
SSDEEP

6144:t3AB3Rd4f9oVVH/8V2LxdUAShFbvl04vGU8RU21Y5D2lVEGQC4:t38Rdc1h5l0Vd8ilVEG1

Score

N/A

Malware Config

Signatures

Files

5c2ab8a6fb9e3f075e11faeeb21526aca138e4999d592585eb025d51b92015f0
.exe windows x86

6842ce29cf49bc6a11e0d5a6cf9b15ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeW

user32

EnableWindow
SetActiveWindow
SendInput

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ