5601b9c3146aa882fa7b1660b7db5ca14ba911310a96a26fcf4e8fbc5f1f9752 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5601b9c3146aa882fa7b1660b7db5ca14ba911310a96a26fcf4e8fbc5f1f9752
Size

184KB
MD5

30281e81be69171c44a7e94f03f45980
SHA1

93f3a11e2675bbc3cf713907dda9899fba5cd8ea
SHA256

5601b9c3146aa882fa7b1660b7db5ca14ba911310a96a26fcf4e8fbc5f1f9752
SHA512

bc2045ba7211895c92c09c8bcd4312ef0d282b33f3f295a8272150e13ef9b88be124096c6c538019df935395179ade7b0c459f0ab95f05571036137a35a3e95d
SSDEEP

3072:OFWJsJhpLWxIhtOnIkR1XHs2qmRlixXaKa0qMW2pVol3IFEyKwL8/eAi:OFWWpCxkcb3/wguJpVopIM/eH

Score

N/A

Malware Config

Signatures

Files

5601b9c3146aa882fa7b1660b7db5ca14ba911310a96a26fcf4e8fbc5f1f9752
.exe windows x86

dccff06fea26d522789b9c68648ce0ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
GlobalUnfix
IsDebuggerPresent
ReadFileScatter
lstrcpyA
PrivMoveFileIdentityW
ReadDirectoryChangesW
CreateProcessInternalWSecure
LZSeek
BaseInitAppcompatCache
EndUpdateResourceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE