56fc0d8df8fbae4cef1f4d7adfa390a24acd96cf63f58c32359dd1198ef8f739 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56fc0d8df8fbae4cef1f4d7adfa390a24acd96cf63f58c32359dd1198ef8f739
Size

129KB
MD5

8006d98be39e5edfd44fee45837a9e90
SHA1

86af904e936675e40dd69456a27f17c8f5741892
SHA256

56fc0d8df8fbae4cef1f4d7adfa390a24acd96cf63f58c32359dd1198ef8f739
SHA512

3f6e7e87824ded918fce51b09f3136852eba496ece7eb3cdf7c58fb0bbe17386e6a12212c1cd381b31c70697cef9d74346c9e5623d86e52eaad2c289b53a10c6
SSDEEP

3072:C5sHKSWuSuMusz25SCsu2oh40kv3VucVEo7qKmC:C5s3SuZ5Fsu6vFuy

Score

N/A

Malware Config

Signatures

Files

56fc0d8df8fbae4cef1f4d7adfa390a24acd96cf63f58c32359dd1198ef8f739
.exe windows x86

f34eba14faadd5496362894d3a0b3ad0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidLanguageGroup
VDMOperationStarted
WriteProcessMemory
MultiByteToWideChar
GlobalLock
DnsHostnameToComputerNameA
HeapSetInformation
WritePrivateProfileStringW
BaseCheckAppcompatCache
GetSystemRegistryQuota

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 31KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE