20c5e6f27808bb820278faa15340c5f9fda6686a8b960b0c405fec54f32bcbbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20c5e6f27808bb820278faa15340c5f9fda6686a8b960b0c405fec54f32bcbbe
Size

300KB
MD5

4d9321977236b8e78f7a063fb1b5c6d5
SHA1

151353d4dfe34c60dac914b21ba54454ee241867
SHA256

20c5e6f27808bb820278faa15340c5f9fda6686a8b960b0c405fec54f32bcbbe
SHA512

0bd99e2b876fa2d0a4939b373a2ed9a53ba68c66ada19b02d47eb23d1f13c4a42e84c0ff340e1753ae999dbe493aae0df18f0ea4335602051815cc3b14920526
SSDEEP

6144:ktXcYR0LqUmrkK3AFSMUlULy+JvcfM5Q0s:uXcD2Umb3P/ULysAM2

Score

N/A

Malware Config

Signatures

Files

20c5e6f27808bb820278faa15340c5f9fda6686a8b960b0c405fec54f32bcbbe
.exe windows x86

03a0abc1c687cd5ce08e02eec5f34c8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
SetEnvironmentVariableW
InterlockedExchange
Sleep
Sleep
LoadLibraryExW
InterlockedIncrement
Sleep
HeapCreate
GetPrivateProfileIntW
SetFilePointer
GetPrivateProfileIntW
lstrcmpiA
CreateDirectoryA
GetLongPathNameW
GetFileAttributesA
GetModuleHandleA
WaitForMultipleObjects
FindResourceW
GetPrivateProfileSectionA
lstrcmpA
GetExitCodeProcess
GetDiskFreeSpaceA

catsrv

DllCanUnloadNow
OpenComponentLibraryTS
GetCatalogCRMClerk
CreateComponentLibraryTS

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE