5d1761275a4b442c06763f5bc952d9924e953a3f009372c07eb425913540def2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d1761275a4b442c06763f5bc952d9924e953a3f009372c07eb425913540def2
Size

34KB
MD5

ef747b2903b53df62c73db98eb1c15e9
SHA1

b4b1926f7d6798337e86b79e4cda48cf549dec78
SHA256

5d1761275a4b442c06763f5bc952d9924e953a3f009372c07eb425913540def2
SHA512

01b940303f4a2470843a3466a7c9a9839376bacc7c7d098c7ffbf6929c0cafad4c57654e84119e439973e86bc2f481bfb0f3ca5ceb8a76a954e7627a53c2ce01
SSDEEP

768:bt7pL++mXpIrUnc5rrJAQ5gYCUNNx+6FnUd:b1pLrYIoIVA8gYCUY

Score

N/A

Malware Config

Signatures

Files

5d1761275a4b442c06763f5bc952d9924e953a3f009372c07eb425913540def2
.exe windows x86

63eeea7699532f48bdec730fa1a78c59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
ExitProcess
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
HeapReAlloc
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 582B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ