4b54f258ead272c83981248ed29525704f2bb8f1cfa1433ecd65bda223f47b5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b54f258ead272c83981248ed29525704f2bb8f1cfa1433ecd65bda223f47b5c
Size

495KB
MD5

e6c778c5a492e86b48d0637766c7e13a
SHA1

deb9f41a63a394fd6e17e82871e9aff796d37762
SHA256

4b54f258ead272c83981248ed29525704f2bb8f1cfa1433ecd65bda223f47b5c
SHA512

8c1305f7b4fba36c524e506379f74f174c02b3b1d96a3761d3747827661b1ca5888f58303034db46109fcd2eaba2d737e2b59ac7be9a47d82262f944406c99a1
SSDEEP

12288:DWIU4UzpDJLbArJuEz+Wj9aiMmvXLYLbZyz:az2daN7Y7+4

Score

N/A

Malware Config

Signatures

Files

4b54f258ead272c83981248ed29525704f2bb8f1cfa1433ecd65bda223f47b5c
.exe windows x86

c4d9e7a924ba2ca92289d4a3c86c6c24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
GetTickCount
GetExitCodeProcess
GetStdHandle
HeapCreate
GetLogicalDrives
GetDriveTypeA
SetLastError
GetPrivateProfileStringA
lstrcmpiA
lstrcmpiA
lstrcmpiA
lstrcmpiA
lstrcatW
lstrcmpiA
EndUpdateResourceA
GetBinaryTypeA
GetModuleHandleA
IsValidCodePage
CreateWaitableTimerW
FileTimeToLocalFileTime
Sleep
TlsFree

ntmarta

AccFreeIndexArray
EventGuidToName
EventNameFree
AccConvertAccessToSD

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 488KB - Virtual size: 1016KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 607B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ