b5ae56fbfbf3e874fb5a53c3e492a9fc497b6c491c167311ad151c4a8219ee3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5ae56fbfbf3e874fb5a53c3e492a9fc497b6c491c167311ad151c4a8219ee3b
Size

879KB
MD5

0e54b19dffb6316422e1ad48c5226020
SHA1

1205f6d5aee5d6e97d1c448d7713a2c7aa1a2590
SHA256

b5ae56fbfbf3e874fb5a53c3e492a9fc497b6c491c167311ad151c4a8219ee3b
SHA512

a8f4e632c746d1085996d233fc3c6738138b302a74b1ef5b05116bba1267ec129e87d2d85af6e923f0b2604dab1489259a404d1ee0e218b850479c1e6cf2cec6
SSDEEP

24576:r1pKBTNfYIzjHuN0O6FeconMW689soLO1H750zXrBqu:rqBhtu2O6GHLibaLr

Score

N/A

Malware Config

Signatures

Files

b5ae56fbfbf3e874fb5a53c3e492a9fc497b6c491c167311ad151c4a8219ee3b
.exe windows x86

de9fb061ec2cb798c976ae4699cdbeed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
SetCurrentDirectoryW
SetEndOfFile
SetEndOfFile
GetStdHandle
GetTickCount
GetModuleFileNameA
SetEndOfFile
GetStringTypeW
SetEndOfFile
OpenEventA
SetEndOfFile
CreateEventA
LoadLibraryA
GetFileAttributesA
lstrcpyW

wmnetmgr

DllGetClassObject
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow

Sections

.text
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 869KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE