d5e0b73d40d3f3fd456652bd62556bfeb1c2555293dd214c01208f840ba1fb60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5e0b73d40d3f3fd456652bd62556bfeb1c2555293dd214c01208f840ba1fb60
Size

63KB
MD5

5e0d710bd6147a50f2d377d7b5be97b3
SHA1

3869fc380542841c48ee161d8d5e99d2d3cfe009
SHA256

d5e0b73d40d3f3fd456652bd62556bfeb1c2555293dd214c01208f840ba1fb60
SHA512

eb4283536a2f314d4c009ad79841242e5bc7caed61ac6aed6bf6c81977d656665beaf73efb17399e357857fdfd04a45bf69472e45eb53d69855e0fc223eadf62
SSDEEP

1536:nabbG8jU4SvfnKNiBg0RmP2nZESEbiT1MdFs+Y:nqbGZ94+ETFs+Y

Score

N/A

Malware Config

Signatures

Files

d5e0b73d40d3f3fd456652bd62556bfeb1c2555293dd214c01208f840ba1fb60
.exe windows x86

e445ddba65db4ceb6fb264a90affa103

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryW
QueryWin31IniFilesMappedToRegistry
QueryWin31IniFilesMappedToRegistry
GetProcessShutdownParameters
CreateThread
GetFileType
FileTimeToSystemTime
SetNamedPipeHandleState
CopyFileExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE