5e9a3ea590848ed5822b0e4d9924d038c17ccdc576df4c2ff133b014fc6d676f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e9a3ea590848ed5822b0e4d9924d038c17ccdc576df4c2ff133b014fc6d676f
Size

56KB
MD5

0f2ff3988fd8effca731c0ec5d5f8346
SHA1

259c27bdf942fd91403d9efaea3da3111fd6aaf1
SHA256

5e9a3ea590848ed5822b0e4d9924d038c17ccdc576df4c2ff133b014fc6d676f
SHA512

e6d1f8739e8fa9f4bc51a6122352dd776c9dc00eb7644992e2c5425c7a683a75b091fd7a6a5aab8a76aefa04eea82160d28ac775295a0b64554faeeb920e5f88
SSDEEP

768:7OjpGIS51eth1DeRbwjXYosCi0l4peC2EeHCBqJuBJ2ldCTuaTN4Dr+8rpAlbWA5:7JIjjXY4l4pYBHCWw+wN41ClbvYI/R

Score

N/A

Malware Config

Signatures

Files

5e9a3ea590848ed5822b0e4d9924d038c17ccdc576df4c2ff133b014fc6d676f
.exe windows x86

5d3702cec6e45b5a9a275ce9aa49a51d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchangeAdd
GetSystemDirectoryA
IsDBCSLeadByte
GetPrivateProfileIntA
CreateProcessA
FindNextVolumeA
SetDefaultCommConfigA
GetDefaultCommConfigW
FindFirstVolumeA
CreateNlsSecurityDescriptor

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE