5b65a9e4f21b44b82a606c0790eca9359eaa0e834718482869535e73267da161 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b65a9e4f21b44b82a606c0790eca9359eaa0e834718482869535e73267da161
Size

119KB
MD5

84580f3f445562758e9b762d3c4e5c4f
SHA1

8b05e785efb5b6e17a94a2b66bacb0d14eee701d
SHA256

5b65a9e4f21b44b82a606c0790eca9359eaa0e834718482869535e73267da161
SHA512

d065d1aaca2b067290caf94311fe1ce1cb8e6db62cf00d7b7f39a72d795afd0ed555ef6174ae3646743e1b8e6e83677b57b2454a9087be460b04337012b95c12
SSDEEP

3072:7G3Esy/ctGvbYFShx1yB+sIXFLwjHs2qxnC:7yM/ctiQShx1yBXIXe

Score

N/A

Malware Config

Signatures

Files

5b65a9e4f21b44b82a606c0790eca9359eaa0e834718482869535e73267da161
.exe windows x86

f411f7c490b672f09d1c92fa530c6e23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
_lopen
AddLocalAlternateComputerNameW
EnumDateFormatsExA
RegisterWaitForSingleObject
GetVolumeInformationA
IsValidCodePage
ZombifyActCtx
CreateProcessInternalWSecure
GetConsoleOutputCP

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE