5c0a144e31ab2001662e320b46366c6341d1b16180a5e51c68a861bdfa65eeda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c0a144e31ab2001662e320b46366c6341d1b16180a5e51c68a861bdfa65eeda
Size

118KB
MD5

5d40ef4aa28f8205448328f8402025a9
SHA1

ef3ab7198589efa4897b00c4c870d76535a42b0b
SHA256

5c0a144e31ab2001662e320b46366c6341d1b16180a5e51c68a861bdfa65eeda
SHA512

811dc6a0add9d30c17f65e2f763bdd13a168b14ffbd46885b1ebac93f7ef2f68b132a28f3a760ac1a92de67593531cd90670fb2fa5c58f9bb7b529eb9d477713
SSDEEP

3072:IWe1YX1brDYnrCpqkGr0ETKYrCXbyBU4j3K990w:rXVKgqz0dYrCXbB289

Score

N/A

Malware Config

Signatures

Files

5c0a144e31ab2001662e320b46366c6341d1b16180a5e51c68a861bdfa65eeda
.exe windows x86

e4743afb73c4c7a7cba55c0880a52b4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
GetStdHandle
lstrcmpiA
lstrlenA
CreateWaitableTimerW
GetLogicalDrives
lstrcmpiA
GetModuleFileNameA
lstrcmpiA
lstrcmpiA
HeapCreate
GetBinaryTypeW
GetDriveTypeA
IsValidCodePage
SetLastError
GetModuleHandleA
Sleep
CreateNamedPipeA
EndUpdateResourceW
GetExitCodeProcess
GetProcessHeap
lstrcmpiA
SuspendThread

printui

bFolderRefresh
bPrinterSetup
ConstructPrinterFriendlyName
PnPInterface

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xml
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE