5c13d8070c9adb9988563fac06f26fccead4b3c5b8c0a77d4d461ef5b9f1c96d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c13d8070c9adb9988563fac06f26fccead4b3c5b8c0a77d4d461ef5b9f1c96d
Size

301KB
MD5

15ce56171f49b5952265a6f635096f80
SHA1

dafd37d60c7993a91c153500da662431af814922
SHA256

5c13d8070c9adb9988563fac06f26fccead4b3c5b8c0a77d4d461ef5b9f1c96d
SHA512

63d0ca8bd6607d862310d544f64b78a7a79e77886d142ae146c696fbf466a7c1cc32c6ef1eeab799aecb10eb42d4179f049896b7839b005e071a22c7ef28dc2e
SSDEEP

6144:rGdcbBWkdaSNbdzR5lhPE6pwQjVQoSM/0jkOPr8oWc7IziPz2:CdcbBvhlVTpwQa9XjkOPIekP

Score

N/A

Malware Config

Signatures

Files

5c13d8070c9adb9988563fac06f26fccead4b3c5b8c0a77d4d461ef5b9f1c96d
.exe windows x86

3d25f5f928b9d3a5c0da654e9ab002f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
CreateMailslotW
IsValidLocale
GetStartupInfoA
lstrcmpiW
lstrcmpiW
GetModuleFileNameA
lstrlenA
GetLogicalDriveStringsW
DeleteFileA
CreateNamedPipeW
GetConsoleAliasA
GetVolumePathNameW
lstrcmpiW
GetProcessHeap
GetCommState
Sleep
lstrcmpiW
FileTimeToLocalFileTime
HeapCreate
lstrcmpiW
GetStdHandle
GetModuleHandleA

scecli

SceOpenPolicy
InitializeChangeNotify
SceSysPrep
DeltaNotify

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ