4613c1b603dbaff8d591458c797954353db66cf1e4a21fa0e1985371e74b27c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4613c1b603dbaff8d591458c797954353db66cf1e4a21fa0e1985371e74b27c5
Size

114KB
MD5

1b2262951d54e2aa50ac836a8a829440
SHA1

4dc19733b1a83a5530bac11d8ce1b8ea50f0c7c3
SHA256

4613c1b603dbaff8d591458c797954353db66cf1e4a21fa0e1985371e74b27c5
SHA512

f3cef2bb30b1ba1edd4c2ae5f714379faec9b6bd8fa6646306768662764d8283e9060559ce42d7d6b3140d45a84762e5994d1d04b1c9acffeb06ab8ca3ebfb65
SSDEEP

3072:b/CaCWvbwZqjFsC+G/dxa+M0udESFIT671t54:RvcZC+GxM0udESO271tW

Score

N/A

Malware Config

Signatures

Files

4613c1b603dbaff8d591458c797954353db66cf1e4a21fa0e1985371e74b27c5
.exe windows x86

691d680f8c3b9959ae1fc21ccadb81c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
GetTickCount
HeapAlloc
GetModuleHandleW
GetExitCodeProcess
lstrcmpiA
DeleteFileW
HeapFree
GetConsoleTitleA
GetStringTypeW
SetFilePointer
DeleteFileW
IsValidCodePage
GetVersion
GetDriveTypeA
GetStdHandle
GetShortPathNameW
GetModuleHandleA
DeleteFileW
lstrcatA
GetStringTypeW
GetLastError
HeapCreate

netshell

HrCreateDesktopIcon
DllRegisterServer
DllCanUnloadNow
HrLaunchConnection

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rs
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE