5404c91e9533f0c9fcf51fd615c66e8f06f8ce74011ad2edc0995ee3616e4022 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5404c91e9533f0c9fcf51fd615c66e8f06f8ce74011ad2edc0995ee3616e4022
Size

140KB
MD5

521f85f4cd4f73df9f734429e18498d0
SHA1

994de7b8eeb3908828da5b706c5c5870e4bb4a18
SHA256

5404c91e9533f0c9fcf51fd615c66e8f06f8ce74011ad2edc0995ee3616e4022
SHA512

4eeeba622e46f5eed4d721a6caa6f257b1f79a0649a4edaa86136003c5851cfeef107f172d3f02b4d93aed3e0f7e3dcd1133154d50670d17a78e3432d634dc29
SSDEEP

1536:WUe7CIsc24HsMowOW8CTo4wS7WzcWB2WVFdyEOPVwoRKoS:Pe7Co2MNxTodSWBx/o5dw+Ko

Score

N/A

Malware Config

Signatures

Files

5404c91e9533f0c9fcf51fd615c66e8f06f8ce74011ad2edc0995ee3616e4022
.exe windows x86

bc60f2820e55bc4883743880d6bacd95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetProcAddress
GetVersion
CreateFileW
lstrcmpiA
GetVersionExA
ExitProcess
TlsGetValue
LoadLibraryA
VirtualFree
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
VirtualAlloc
GetCommandLineA
VirtualProtect
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LCMapStringW

user32

GetClientRect
GetSystemMetrics

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ