5f970c696365e2a83b3d180b32157254146725b4453b6d54e0e87ba29056bcdd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f970c696365e2a83b3d180b32157254146725b4453b6d54e0e87ba29056bcdd
Size

80KB
MD5

034d02e2cedb1b303067f32c79de7b87
SHA1

68b760936489d5b11ffdfeb738b07d4fa7d038ef
SHA256

5f970c696365e2a83b3d180b32157254146725b4453b6d54e0e87ba29056bcdd
SHA512

11e6253232f693ea0c1098961e7e95cd993d02e368ae77f2da4e5ed5fb6e9ae2c43a6bccd03b35d9b5f082ecd62abce442106f00e047128dfe594c51da8292c8
SSDEEP

1536:EIKoRVTt+F2jsQSCwQSMAQlpS03psjHkx+vaJm82hW8fPL:722jsQ/wQSMzpzGjEx+Mm8vYL

Score

N/A

Malware Config

Signatures

Files

5f970c696365e2a83b3d180b32157254146725b4453b6d54e0e87ba29056bcdd
.exe windows x86

6e8e91b341082353e20dfd48e0695d0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileStringA
WaitForMultipleObjects
SetConsoleMaximumWindowSize
LoadLibraryW
GetDateFormatA
FindFirstChangeNotificationW
GetExitCodeThread
lstrcat
FillConsoleOutputAttribute
ReadConsoleOutputCharacterW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE