5baef20c1a33caedc1fd2457226922cab17a6141626c1645ec42bc6611cba7a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5baef20c1a33caedc1fd2457226922cab17a6141626c1645ec42bc6611cba7a4
Size

179KB
MD5

90558314ca8622adf6d254ef8241e93c
SHA1

9c9859cdb7a1f6acb85d18c01daaadeddb99d0be
SHA256

5baef20c1a33caedc1fd2457226922cab17a6141626c1645ec42bc6611cba7a4
SHA512

8a385e3b08802b825a9b2c2becc7746b31c472394e3de011a4609ef0b5553a735e79005de6f72d305ce1daa1e3d87290a1c941f46eae3d5d57a30e4b244c6a3b
SSDEEP

3072:XkKChoUww2QB4jnL0SnA3GlWhf+qmQ0xDLbsh3Q836db0EbIZlSSeYeVtnGPdvOQ:0OjLRwM7qJ0xvIhA8kL0e/Yenn8xFVb

Score

N/A

Malware Config

Signatures

Files

5baef20c1a33caedc1fd2457226922cab17a6141626c1645ec42bc6611cba7a4
.exe windows x86

e19d862dabee8544263091704b01c087

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetWaitableTimer
GetProcAddress
Sleep
GetModuleHandleA
GetLastError
DeleteFileA
InterlockedExchange
OpenEventA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeW

user32

LoadIconA
LoadImageA
EnableWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ