5a1725548da673dae2e55ad8f20e859951622e0471d2679a376361810ba01a91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a1725548da673dae2e55ad8f20e859951622e0471d2679a376361810ba01a91
Size

496KB
MD5

411d4bfde9b4bf8e63dc1ea05631fb90
SHA1

49a9922b90872a3b8375c8e23f395fee4848fc70
SHA256

5a1725548da673dae2e55ad8f20e859951622e0471d2679a376361810ba01a91
SHA512

ad9e9adda51f11af04dfed89c05f43d6a69df8add6262bfc16bf74bda4a5f915ea2738bf9558aa3679e21bd68a00590c3f68366c10dea0ab62fb54b6fe61e270
SSDEEP

12288:B/zFYJkUtH9NiJ1gKP9EthEADIcYrYtVQGv9PUYN:RovH9NNKuhEAOG98I

Score

N/A

Malware Config

Signatures

Files

5a1725548da673dae2e55ad8f20e859951622e0471d2679a376361810ba01a91
.exe windows x86

5b97ec2297945225d3db34269bb7ad56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlFlushSecureMemoryCache

user32

GetForegroundWindow
GetCapture

Sections

.text
Size: 489KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE