5b23cc9ff4fb0b5d89fca8b4ed018c8f1ed16931fc21aedd26f52200a1dda191 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b23cc9ff4fb0b5d89fca8b4ed018c8f1ed16931fc21aedd26f52200a1dda191
Size

124KB
MD5

624ab2447e88cb32cfe53d6f4d84af84
SHA1

bd86ff20f5cb31d822bff75cdc671a5b6b14e44b
SHA256

5b23cc9ff4fb0b5d89fca8b4ed018c8f1ed16931fc21aedd26f52200a1dda191
SHA512

4a92fc5fb8bff3e19517797d6187aab5f4d5a4dfc0c16fe2b89f38973c9368a6d92f80fd1a71268c7674e37f69da308ddbdb34f28325bbbeb633c20fedc1535f
SSDEEP

1536:8JimwLtoSnNoVjKRR9YcUm8GXDyiz5w/ZdDi9Si2UmVQBOWua8+kQi8JGhsLdn+g:8J4tfNoG9YMfOhEOPQlneD8JGhEog

Score

N/A

Malware Config

Signatures

Files

5b23cc9ff4fb0b5d89fca8b4ed018c8f1ed16931fc21aedd26f52200a1dda191
.exe windows x86

e05f884943c54f6c6d753f1d75e7a6b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
MoveFileA
DeleteFileA
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
ReadFile
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
SetStdHandle
FlushFileBuffers
CreateFileA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE