561a1d502e6965f75d0fe984329bd12e36b2f5457f479562d9adc4f67a80936a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

561a1d502e6965f75d0fe984329bd12e36b2f5457f479562d9adc4f67a80936a
Size

114KB
MD5

1b76ac4235e7da568843945df9ef9f80
SHA1

3d615e98efc4b88c5dd9682ad4fd197c66d37b12
SHA256

561a1d502e6965f75d0fe984329bd12e36b2f5457f479562d9adc4f67a80936a
SHA512

e6d052d0c185f2993a0027719015bbd343bd52238433fe145038879aa1a45247c6377229e86e08aca95933e4df4781808529d251dd2074ebb6374709bf443310
SSDEEP

3072:FG2+jifkWHAd8j0NcOPAtfBp66q0aY8/MvmH8ArTNBI:bfnHAdg9OPAtJp66NN8/MOHXTNm

Score

N/A

Malware Config

Signatures

Files

561a1d502e6965f75d0fe984329bd12e36b2f5457f479562d9adc4f67a80936a
.exe windows x86

1a9fc769fc2e3cd29b30809805f489e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetLastError
GetVersion
DeleteFileW
CreateDirectoryA
GetModuleHandleW
HeapAlloc
GetConsoleTitleA
GetExitCodeProcess
IsValidCodePage
HeapFree
GetStdHandle
GetShortPathNameW
GetStringTypeW
DeleteFileW
GetDriveTypeA
SetFilePointer
GetModuleHandleA
HeapCreate
SetEnvironmentVariableA
GetStringTypeW
DeleteFileW
SetCurrentDirectoryA

mstscax

DllGetTscCtlVer
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rs
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ