5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd
Size

151KB
MD5

592f9031cda36316ff3498bfadbbfbd3
SHA1

60541033895508dbd7345667432c3b1f3ee6e0c5
SHA256

5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd
SHA512

e2a80b370b0145796fad39be456baef49d5c3b6c7e36f63a876b78629ee6cd65f83e4fd50525663364ccef4b60f222f40698a84496ed7c928d5c60dad0ffa528
SSDEEP

3072:hC80ePWkjAitK0lc8TqrknAAAXCP/QFYsxOBKetFpbpmEgSH:h6e8itforkAAAyPImUOBVli8

Score

N/A

Malware Config

Signatures

Files

5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd
.dll windows x86

7f5e733338dbcefe179fd077e1bed769

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
LocalFree
RtlZeroMemory
Sleep
WriteFile
GetFileAttributesA
GetCommandLineA
CreateFileA
ReadFile
CloseHandle

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ