e552314e9457fae8e4c1ddd2c44cd98f7719054ba209a06ff6cf1a788b468135 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e552314e9457fae8e4c1ddd2c44cd98f7719054ba209a06ff6cf1a788b468135
Size

86KB
MD5

d998593d5fd4443e9981d60860e06418
SHA1

9bde773ac9a3aa1319e38c326ea92f29c69ea5c7
SHA256

e552314e9457fae8e4c1ddd2c44cd98f7719054ba209a06ff6cf1a788b468135
SHA512

5ded9897cca316b69eb7cdeb5fca08979c7a526a4168775fb50d4a9fe5ea7deefb10bf0decc4eaa393db162ca2c60ff280205cece502b3fbd0cb886bf21fb9d4
SSDEEP

1536:gcXWel7kXPM/Ho+3EjyozrBEHX32EDcM9vIwvuRNf1BnJNP7dcf7T61s5Varlj:gKWexkXQihBO32AbvuNf1Njdw7T2cVaR

Score

N/A

Malware Config

Signatures

Files

e552314e9457fae8e4c1ddd2c44cd98f7719054ba209a06ff6cf1a788b468135
.exe windows x86

39be3c529e288ed4408aa3a1112e41f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
ReadProcessMemory
HeapUnlock
WriteConsoleInputA
GetCommMask
IsBadStringPtrW
GetCommandLineW
SetComputerNameExW
CreateEventA
VirtualUnlock
SetComputerNameExA
EnumerateLocalComputerNamesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE