5201291b4ac895a22b00d5c802c9a7e15f4f110c58d9de0920b27d9ca477ce41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5201291b4ac895a22b00d5c802c9a7e15f4f110c58d9de0920b27d9ca477ce41
Size

485KB
MD5

936c43429afebb35008a744255fd2720
SHA1

0559ac5d54462ecbabc31ee6ca8ae53246c56367
SHA256

5201291b4ac895a22b00d5c802c9a7e15f4f110c58d9de0920b27d9ca477ce41
SHA512

a25fd8daa7b435d83ed6b1d109e4666b33888c81d8a6ce97a46e528a7687212476e13aaefacc44f67bf48d7afdc4ab75c1f498043c7652a998ce2ec237e96d60
SSDEEP

12288:GNbVm3n0hEtUSFQybQsq6qcvaf9Zz04Ya68tVTNb7+Tu3O:GNZS0OiybK6Lk9JvH5byu3O

Score

N/A

Malware Config

Signatures

Files

5201291b4ac895a22b00d5c802c9a7e15f4f110c58d9de0920b27d9ca477ce41
.exe windows x86

8dba149a5404ae29618d9a4a11c4aecf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetInputDesktop
GetClassNameW
GetInputState

ole32

CoRevokeInitializeSpy

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE