a56eb954763279639a2436bfdf7d3fab607446cefc59a381b3fd1605995b6b20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a56eb954763279639a2436bfdf7d3fab607446cefc59a381b3fd1605995b6b20
Size

56KB
MD5

5473f3013fb885ef6d021ea63e53bfdf
SHA1

fe32e21508fffb14d851ffce160d1c8d792b301d
SHA256

a56eb954763279639a2436bfdf7d3fab607446cefc59a381b3fd1605995b6b20
SHA512

278b57bb31aeb56b94a2e820806274d1635c224d251a4c5ebc00c28affc02d73088fc53dbcb02a35b2e4b6433880c12f3ede333bc397abdb37a30a7e47972bce
SSDEEP

1536:R46/CKrYsBpx/IZFsAUYduxGhVlrl1LjXi5c+I9M:7C+BpxAZOBxGDlrl1MI9M

Score

N/A

Malware Config

Signatures

Files

a56eb954763279639a2436bfdf7d3fab607446cefc59a381b3fd1605995b6b20
.exe windows x86

d5903bf71df5efb6afbb7b085b3d5c97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWindowsDirectoryA
UTRegister
SetConsoleCommandHistoryMode
GetProcessId
SetFileAttributesA
FormatMessageA
GetBinaryType
CallNamedPipeA
CreateMemoryResourceNotification
DeleteCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE