5136c1b08b90d978e205f35c504312ce37d8169c754c2f49f857e9e7d21feb42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5136c1b08b90d978e205f35c504312ce37d8169c754c2f49f857e9e7d21feb42
Size

832KB
MD5

03dd705086c55810a8c0c7cf11b9a5e6
SHA1

b90343cae876b0516bdd41f2b833d7a823975ab4
SHA256

5136c1b08b90d978e205f35c504312ce37d8169c754c2f49f857e9e7d21feb42
SHA512

46f3c3e06402f26aabc78013841bc094ab8d3dcd0676ee9c8f9901d07aa216a2c3ff82e9e93fa9ca98cc4783147d6de3cd1700b5a3d1594d1f099b657f60e1f4
SSDEEP

24576:/SeaESgXL56N2AyRHQRs2AucgmQvhSKPhSy/PRjKF:KeaEBXL544RHQR09TQp/lRjg

Score

N/A

Malware Config

Signatures

Files

5136c1b08b90d978e205f35c504312ce37d8169c754c2f49f857e9e7d21feb42
.exe windows x86

dda2dc386bb7665c9853ef904946c471

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFileMappingA
WriteConsoleA
CopyFileA
MoveFileExW
ReadConsoleA
GetFullPathNameW
GetDiskFreeSpaceA
CompareStringA
GetBinaryTypeW
GetProcessVersion
GetDriveTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsA
HeapCreate
SearchPathW
CreateDirectoryA
GetModuleHandleA

msdart

??0CEXAutoBackupFile@@QAE@PBG@Z
MpHeapSize
mpFree
mpMalloc

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 813KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ