f5bb0c64e483da80599c60926d48c6b796ba536009efc46d8ffdf8fdf99b6f41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5bb0c64e483da80599c60926d48c6b796ba536009efc46d8ffdf8fdf99b6f41
Size

75KB
MD5

8d7d658a463aae238ad9bca2def41d87
SHA1

02dae4218315fb477bfc1c8264e262afe3b7b5d1
SHA256

f5bb0c64e483da80599c60926d48c6b796ba536009efc46d8ffdf8fdf99b6f41
SHA512

f8b09f3f727330559d9d4aaea016dd58f3985c25997a507e482fe3bdb5eed1509b64e2f9ed3d5307679163483ee3d99579ad27102518057117358974c1e65d4f
SSDEEP

1536:+j8d0cHjiifOBqvUlEhHJ+t4yhOUvwrOSUN9PXKQJBV3L+lfDTw:+j8d0miifO+hHJ+JhOUvwrhUN9Pa4Bkw

Score

N/A

Malware Config

Signatures

Files

f5bb0c64e483da80599c60926d48c6b796ba536009efc46d8ffdf8fdf99b6f41
.exe windows x86

8d1f3607f6f644aa45436b6badedcfb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualAllocEx
VirtualFree
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 24B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE