5b92e3bbc87650d31d9996dcb0f3d1a92414a2b48fcbd234446b4a347dcfb123 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b92e3bbc87650d31d9996dcb0f3d1a92414a2b48fcbd234446b4a347dcfb123
Size

83KB
MD5

0c6d861750a6ffac60705f5de2695eb0
SHA1

975450cdf7e970ea065d1a838c4f46c91a6f5ee8
SHA256

5b92e3bbc87650d31d9996dcb0f3d1a92414a2b48fcbd234446b4a347dcfb123
SHA512

7267cb95e39fc71526554b298481ce78d339305a1102ce3b1436df9b74a67e6eb25f744d73e92ced8f31916ed0b755341e6f32b9195695b629c1e88d816d205b
SSDEEP

1536:F/98blAK5oGec/o0EcDWFo3ovrbURoADfYGJjrtzKAOsjEErxTWDTMqhGKYIZTEP:F/qblf0KEcDOoYzBAcGBNK/sjBkMqhGZ

Score

N/A

Malware Config

Signatures

Files

5b92e3bbc87650d31d9996dcb0f3d1a92414a2b48fcbd234446b4a347dcfb123
.exe windows x86

17607a17059cd3439287cb685c0aa69c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetGeoInfoW
EnumUILanguagesA
WriteProcessMemory
SetDllDirectoryW
GetSystemWindowsDirectoryA
lstrcmpW
DuplicateHandle
DebugActiveProcess
IsProcessorFeaturePresent
SwitchToThread
FindFirstFileExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE