a5c6b78441e2efaf6e83d1f2bd7fca212aefc261d21d7d6d2c56b0052ab93322 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5c6b78441e2efaf6e83d1f2bd7fca212aefc261d21d7d6d2c56b0052ab93322
Size

62KB
MD5

0758f10727ce63dd7e1c0e3a5e6f6f48
SHA1

e05750499856e24e57f58fd20fb29df4c3616d78
SHA256

a5c6b78441e2efaf6e83d1f2bd7fca212aefc261d21d7d6d2c56b0052ab93322
SHA512

bd459a1bae4c2488f11ec5d573e2cb35f1363cb9b4dcf0d541f3720435976b7e7c7babac777dcfc7ba1ab9f189cb05112fb0549183784901f3972fa72f5b4967
SSDEEP

768:bORNDJqxr96IWuL9R56+LNsrApe+tubyF2cIMImiY5NHSNMdDC8uESmVs40FYJCe:bORz26QNsF+sNfybH1dGtqs4mbK

Score

N/A

Malware Config

Signatures

Files

a5c6b78441e2efaf6e83d1f2bd7fca212aefc261d21d7d6d2c56b0052ab93322
.exe windows x86

67791247705ed3034a3752953f0b62dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateHardLinkW
lstrcmp
GetCPFileNameFromRegistry
ReadConsoleInputExA
GlobalMemoryStatusEx
CheckRemoteDebuggerPresent
FindNextFileA
ClearCommError
GetCompressedFileSizeW
WriteFile
FindNextVolumeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE