5f79e3a85f025c9779107308d19f0e11e076ddfa6fa8b18e3bd4de0d33ce48a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f79e3a85f025c9779107308d19f0e11e076ddfa6fa8b18e3bd4de0d33ce48a3
Size

63KB
MD5

15c8597958a1aa22c59397cbafe4d7d0
SHA1

184ef8a2f8e29ff9fe57c9875f8be017bc97ed52
SHA256

5f79e3a85f025c9779107308d19f0e11e076ddfa6fa8b18e3bd4de0d33ce48a3
SHA512

778922d018d270abcfd10cb232b67ff1ed9caf674c6717c47dadc4328ca846aefd50adfbdfe271660c7b99e17b4f4f4e888475359ab00ad0ba683b98402b5eda
SSDEEP

1536:gVMoIfHh65dvPFnm3O3wZbiCoIETqsj9qVKbREn/tObp1:g+zfByptWO3wZ+3bj9VlEG

Score

N/A

Malware Config

Signatures

Files

5f79e3a85f025c9779107308d19f0e11e076ddfa6fa8b18e3bd4de0d33ce48a3
.exe windows x86

2daa26944ccca5b9193a1766684e4fcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCP
OpenFileMappingW
GetCurrencyFormatW
UnlockFileEx
GetProcessPriorityBoost
SetCommBreak
SetHandleContext
IsProcessorFeaturePresent
RtlUnwind
GetPrivateProfileStringW
LoadResource

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE