5066841b6bc92237ba7346b8e066673017fbd915dde30493e6b80262a298a02c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5066841b6bc92237ba7346b8e066673017fbd915dde30493e6b80262a298a02c
Size

67KB
MD5

8fb500cfac4510ae8dce368064f8dce5
SHA1

ee9dade0f9cd6634a26368d6b49483652218425d
SHA256

5066841b6bc92237ba7346b8e066673017fbd915dde30493e6b80262a298a02c
SHA512

5566bb27a9efaa229a988f9dc73d9a4c78e9bfc9979b9c4d78aa78a89eba63cbc7f430ef74a8379ea58ce960323caa481c260ecb3512e1171b14a4448654599e
SSDEEP

1536:sP0SOYrzY5UDBAlGIDOlQEFmARkdGw8gwbGHXMe43agtUsbK:6/45wAlNDOlQoRE783bEcUg2sbK

Score

N/A

Malware Config

Signatures

Files

5066841b6bc92237ba7346b8e066673017fbd915dde30493e6b80262a298a02c
.exe windows x86

bc5ca9b612b5d7b181511d99f224f9ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
IsBadCodePtr
Toolhelp32ReadProcessMemory
GetCurrentActCtx
SetUnhandledExceptionFilter
GetVolumePathNamesForVolumeNameW
BuildCommDCBW
GlobalUnfix
GetEnvironmentStringsA
GetFullPathNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE