5f6b237badbd742dd819f19e7f36c8688ea7374979fd8ff51368d6fc868dcaba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f6b237badbd742dd819f19e7f36c8688ea7374979fd8ff51368d6fc868dcaba
Size

76KB
MD5

03e22404b974825ac216ab7de17b1c18
SHA1

18d412f38013d71d0ed3bf91fcb3cf12bd4905df
SHA256

5f6b237badbd742dd819f19e7f36c8688ea7374979fd8ff51368d6fc868dcaba
SHA512

f19f85eb0cd807332fd6f24e3c25393806dfa50c44f7361699fb78ce52ab769cb74ec070296e4ebcf59b99f5bb3158f987752503443be484560c1bdfe4ce6f12
SSDEEP

1536:m/klPOi3xVxb0lsiYcEGKs/1he0A3ftFT6pjVrs2ryrd1vUQuq6:msW4xV5usit5BjXsT6Hs2qo

Score

N/A

Malware Config

Signatures

Files

5f6b237badbd742dd819f19e7f36c8688ea7374979fd8ff51368d6fc868dcaba
.exe windows x86

ee2a7ade38a962d44896839ac424ffbe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleInputExW
CreateProcessInternalA
SetComputerNameExA
_lwrite
GetComputerNameA
CreateHardLinkA
CheckNameLegalDOS8Dot3W
SetTimerQueueTimer
DebugSetProcessKillOnExit
RtlCaptureContext

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE