57ec70abbd65c9877927010e268948442ffcc2685ba7d0289ce6eca3f63a0d29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57ec70abbd65c9877927010e268948442ffcc2685ba7d0289ce6eca3f63a0d29
Size

12KB
MD5

1338e62cfc87b420b6adb9782c9231d0
SHA1

a295f23ae9cc09fb3becbd8b659c790dcf316b4d
SHA256

57ec70abbd65c9877927010e268948442ffcc2685ba7d0289ce6eca3f63a0d29
SHA512

e2dae7f2e4d68c82bd120f1f292c4751d45f945cfaf5c1c5cb503493d254a6a6f0d7d9b1f387ce1bea10a0e741361c821f00788a3b0e8af0cbe0e31bfca9e9f0
SSDEEP

192:1fjANooygp/ZSq/5eW5B8enWeiqIXsP18touF3lcfFf5yqGNHLSX9Pu:NjAy4/5eW5B8enWeiqis9QlcffyqGeA

Score

N/A

Malware Config

Signatures

Files

57ec70abbd65c9877927010e268948442ffcc2685ba7d0289ce6eca3f63a0d29
.exe windows x86

083b2fda79bfff27730cc9cc50f8ecd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtTerminateProcess
NtRaiseHardError
NtTerminateThread
RtlUnwind
NtQueryVirtualMemory
RtlSetProcessIsCritical
NtSetInformationProcess
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

csrsrv

CsrServerInitialization

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE