1c5048dc97c4363c335afb6f2899543c1a224dfa0862ab10619dfe7f6ea36b61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c5048dc97c4363c335afb6f2899543c1a224dfa0862ab10619dfe7f6ea36b61
Size

59KB
MD5

412504f538f6001b11ae5c5fd7d9d8eb
SHA1

7d5261636d87b03ddfd0522fac830ce2a2802cf6
SHA256

1c5048dc97c4363c335afb6f2899543c1a224dfa0862ab10619dfe7f6ea36b61
SHA512

414c679328c4905c970f9e6e86ba67434254147e243f7ed07666188547e4052890302dc2f762d6055c2b6fc9794df4265a52282a97140af158da8be9d83e7405
SSDEEP

1536:FS3/1+o9ItKPzWEIlcVjLU1dH1d2pgkXTrt:Y8o9GKb3I6VjA1dVdkJD

Score

N/A

Malware Config

Signatures

Files

1c5048dc97c4363c335afb6f2899543c1a224dfa0862ab10619dfe7f6ea36b61
.exe windows x86

fe360d81f7dea9300c4070ac66fa2ec9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
ExitThread
FlushFileBuffers
GetCurrentThread
GetModuleHandleA
GetProcAddress
LoadLibraryA
ReadFile
Sleep
TerminateThread
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ajrwwbs
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE