51abe1f5bb93985572ffd5a853360a7a5d44bf283092dd40b8c4d602a133a1ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51abe1f5bb93985572ffd5a853360a7a5d44bf283092dd40b8c4d602a133a1ea
Size

16.7MB
MD5

41afeb91cb02c19da7150e1841412eec
SHA1

d685e308d42466bda994d89aac9344bdff5ed941
SHA256

51abe1f5bb93985572ffd5a853360a7a5d44bf283092dd40b8c4d602a133a1ea
SHA512

4589b184168685bb552ef3797896bbdccc40ef70e94211b9ac081455cd50dfb60d0d6c8a831377535093dec28cd1a92b791a9c995427daca3ee560e7425d02be
SSDEEP

393216:3XDNnaDwLBDrtCOPkS8jZ1gJWiXUYWebNu76+27DdxqBuFmJnMP:3XheuBDhC4kZjZ1mWiJJhuWdxq2mO

Score

N/A

Malware Config

Signatures

Files

51abe1f5bb93985572ffd5a853360a7a5d44bf283092dd40b8c4d602a133a1ea
.exe windows x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16.7MB - Virtual size: 16.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ