5d1dd204acbcc3fed34f629e247f9f4eac96c8851c589989fab0bedda15018d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d1dd204acbcc3fed34f629e247f9f4eac96c8851c589989fab0bedda15018d2
Size

199KB
MD5

fa28fa3b5be979eb4764e95f2d0b33cd
SHA1

6d964177ee2d9820a201251a364c317c886e6784
SHA256

5d1dd204acbcc3fed34f629e247f9f4eac96c8851c589989fab0bedda15018d2
SHA512

7a9e125f2260df23cc1154882c1ec16a86f58567a61639afb9d863e85e552e1e4c7102d29270d48d880086487a0dc29041d4d5c7164d7e24c171b97a2d7ce693
SSDEEP

3072:sAqwusLYFX13l2j6xr/4tUEt8npvv79dUn8GJHApoZ2wnyPkeJFI8l3G:snyLYFlVs+rgtUEipvBShHMoZMFh

Score

N/A

Malware Config

Signatures

Files

5d1dd204acbcc3fed34f629e247f9f4eac96c8851c589989fab0bedda15018d2
.exe windows x86

865df307f560ffebd2e29acda46151be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
FreeLibrary
MultiByteToWideChar
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
ExitProcess

gdi32

CombineTransform
Arc
RectVisible

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ