5dcd1b8f92d5a71ea176de5ea9a08081fc5433a4160b4a5cd9e802e5c74155f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dcd1b8f92d5a71ea176de5ea9a08081fc5433a4160b4a5cd9e802e5c74155f0
Size

320KB
MD5

a0baffc95c45ebd50b695b26c60524e0
SHA1

b660252171a55b17b1f3da2ccdedd017ee75f606
SHA256

5dcd1b8f92d5a71ea176de5ea9a08081fc5433a4160b4a5cd9e802e5c74155f0
SHA512

e7fe3ac77a706fae74cb5760a0e304101f9767bf964369f67e8883746ddcce6ed148981f9c920a6373cad74c185928dd8cd128f34f176a69157597abaf9a876c
SSDEEP

6144:wDDDD4q5EeieUqnqH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:wDDDD4q5EeiDqn42EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

5dcd1b8f92d5a71ea176de5ea9a08081fc5433a4160b4a5cd9e802e5c74155f0
.exe windows x86

0bb4cce59b397f29d110327f0f6a2e7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionStringA
RtlCaptureContext
CreateProcessA
FindFirstVolumeMountPointA
GetCurrentDirectoryW
PrivCopyFileExW
FindActCtxSectionStringA
MultiByteToWideChar
WaitForSingleObject
SetFirmwareEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE