5ff5500e19cd47e57b005462cc1ba1a7276858e84e2cd5211b5f50fa5a258aa0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ff5500e19cd47e57b005462cc1ba1a7276858e84e2cd5211b5f50fa5a258aa0
Size

76KB
MD5

8bb7f5219fff2bb014e1eed2b037a798
SHA1

22014b8d276ad50c74dd16b562a1cfd655ec5480
SHA256

5ff5500e19cd47e57b005462cc1ba1a7276858e84e2cd5211b5f50fa5a258aa0
SHA512

a45fd3888427294bfe41642a4a7c23ac5cde37046f51960df9f65d962de6e9b70192130cd7cb0c09e6530173de34551672048be1af38006b9d34e67e6af6a55f
SSDEEP

1536:MtIeIncCdE5aphUSmatBmudIYQ3+DcmGMdt2k0zc3ts+8ENwzAwVhVk:MtIeIncCdEAOSPHmRYQ3tUdt29cy1Xt4

Score

N/A

Malware Config

Signatures

Files

5ff5500e19cd47e57b005462cc1ba1a7276858e84e2cd5211b5f50fa5a258aa0
.exe windows x86

450ff8d0e453e0537efbed5677782db6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove
strtoul
_strtime
_wsplitpath
_stricmp
_wfopen
_wctime
_wtoi
strspn
wcsrchr
__p__fmode

ntdll

_wtoi
ZwQueryDefaultLocale
RtlSetGroupSecurityDescriptor
ZwSetDefaultUILanguage
ZwAccessCheckByTypeResultListAndAuditAlarmByHandle
sin
ZwContinue
RtlValidSid
RtlAdjustPrivilege
NtEnumerateValueKey
RtlReleaseResource
RtlDestroyEnvironment

ole32

OleDoAutoConvert
CoGetMalloc
OleCreateLink
OleCreateEmbeddingHelper
OleSetContainedObject
CoGetObjectContext
OleCreate
OleRegEnumVerbs
OleCreateFromData
OleSetAutoConvert
OleCreateLinkFromData

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE