d5da0d76962facaa08722f26166d68b45efa5ab8a59cb641f1e65d1ef31a54f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5da0d76962facaa08722f26166d68b45efa5ab8a59cb641f1e65d1ef31a54f6
Size

71KB
MD5

4990e94787efd22002b2425cbd21d0db
SHA1

8d634a1212e03036a73dcba2b9f61d6a06304f9c
SHA256

d5da0d76962facaa08722f26166d68b45efa5ab8a59cb641f1e65d1ef31a54f6
SHA512

8cf59b207d221b1ae17433e4ff2b76c813ea626a7087ef92c38a41503f02e684f8e20529d96f1d5aca45408e1dd6896b1ee0e04166cf97ce9778708d806a35e8
SSDEEP

1536:u0GcLDxDQW5SAw459Y30VJG0ojMmHHhKLH+0NbbcIdCfFTnhZ+YerNKaS:u0G8kW5Nv59y0VsTMrPNbVI4Yeri

Score

N/A

Malware Config

Signatures

Files

d5da0d76962facaa08722f26166d68b45efa5ab8a59cb641f1e65d1ef31a54f6
.exe windows x86

44b7c8ae82d5c8341ef81ce40716c218

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Toolhelp32ReadProcessMemory
SetLocalPrimaryComputerNameW
GetLogicalDriveStringsA
CreateTimerQueue
UnmapViewOfFile
GetConsoleAliasExesA
SwitchToFiber
WritePrivateProfileSectionW
ReadFile
GetProcessVersion

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE