5dd6006843e9b9d0f1314501258150ecbab6147dc9a78c5779213c85179d7413 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dd6006843e9b9d0f1314501258150ecbab6147dc9a78c5779213c85179d7413
Size

119KB
MD5

019cf3a1098523d48dd8b9225bf7c22a
SHA1

a36081f35f735ce839d1173b978cf0126f9bcf3f
SHA256

5dd6006843e9b9d0f1314501258150ecbab6147dc9a78c5779213c85179d7413
SHA512

97c4167de1c7a2fff82d9d85099d9c85e7304b29a64f87aef1157149b51cb0452a82d145b71211e46ae1b15e5b38a39e9c9026d0d16d0c13cedaf4e794fc8648
SSDEEP

3072:gOfRu17iXVlGe2nr2bz7MiE0YpFIcnHhZEXtpxtELVN8:jfRu1eX/Ge2nr4zYiL2hUXHx+Ln8

Score

N/A

Malware Config

Signatures

Files

5dd6006843e9b9d0f1314501258150ecbab6147dc9a78c5779213c85179d7413
.exe windows x86

9390caf186ff4be065b802448891e201

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
DisconnectNamedPipe
Sleep
ReadConsoleInputW
InterlockedExchange
CopyFileExW
EnumSystemLocalesW
IsDBCSLeadByteEx
GetVolumeInformationW
TlsGetValue
ReadProcessMemory
GetComputerNameExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE