f5a93add2b1a3b2fa47650a0621aeed6df35f3c67ad45352b86d7db15c5c34dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5a93add2b1a3b2fa47650a0621aeed6df35f3c67ad45352b86d7db15c5c34dd
Size

824KB
MD5

43aff3dd4134cb5992eb80ad5a2fafe0
SHA1

8d23a06d71ce67b29ea63037cc98d8d797f63a00
SHA256

f5a93add2b1a3b2fa47650a0621aeed6df35f3c67ad45352b86d7db15c5c34dd
SHA512

332b8823d04e836682213064c2ed3a2c5f1a3e98521711e41e8aedec457631023a51c1e820060ec0e8aa20db1ea050762982ab0df0d80ae37c8ba10ef5ec29c7
SSDEEP

12288:/byjAfnjRlEswi/Rq6172l7Ar3HxEC+WkT6ZT0sA6n+hXVeCpgHiqd6wWqoV:/ZngL3rl7GREmk+dtn4MV6wWq

Score

N/A

Malware Config

Signatures

Files

f5a93add2b1a3b2fa47650a0621aeed6df35f3c67ad45352b86d7db15c5c34dd
.exe windows x86

7ff9da6586df848eb81013a8cd838708

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
CompareStringW
GetModuleHandleA
GetTimeFormatW
lstrcatA
HeapCreate
GetDiskFreeSpaceW
lstrlenA
FindResourceW
WriteConsoleA
GetCurrentDirectoryW
ReadConsoleW
GetVolumeInformationA
CreateSemaphoreW
HeapFree
SetLastError
GetEnvironmentVariableW
GetStringTypeA
GetShortPathNameA

hnetcfg

HNetDeleteRasConnection
HNetGetFirewallSettingsPage
HNetGetSharingServicesPage
HNetFreeSharingServicesPage

Sections

.text
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 801KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE