5016d3498568e31be7fb60dd3f46577ccbfbf5360263dfc7d3ce6dc7b97efc14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5016d3498568e31be7fb60dd3f46577ccbfbf5360263dfc7d3ce6dc7b97efc14
Size

56KB
MD5

96eede328042933b477ea287c347c720
SHA1

a011b382d7d3fb8012e3788e63fe2b002c9a4245
SHA256

5016d3498568e31be7fb60dd3f46577ccbfbf5360263dfc7d3ce6dc7b97efc14
SHA512

449dfb9ab3edc5ce4168516efe3a03efdd8e581d8e9bb89b312499524afce5d08586d0c7e09b0983a22edfb43f2a1c7310e8bc5b3c279df4d04d29f6810984d4
SSDEEP

768:rp4445OxakUaEv9Or+lfMEdFzeSX2nI8c4jQUNuB0TLILIlM7udLLiP2gVI7VoDk:ALzeSmnIP8QUEB0foKu2gVI7eOjPW2JZ

Score

N/A

Malware Config

Signatures

Files

5016d3498568e31be7fb60dd3f46577ccbfbf5360263dfc7d3ce6dc7b97efc14
.exe windows x86

40a961d24b1cef2a14d323652c720dd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToDosDateTime
GetTapePosition
GetCurrentProcessId
ReadConsoleOutputA
Module32FirstW
SetNamedPipeHandleState
GetNlsSectionName
GetConsoleCommandHistoryLengthW
SetThreadUILanguage
FindActCtxSectionStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE