5b6ebd148747550dced64af3014dd41f7f01bee69d8784fc114e28778fe0ef58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b6ebd148747550dced64af3014dd41f7f01bee69d8784fc114e28778fe0ef58
Size

65KB
MD5

541c7f869bda59ff85b3930a469ec4ea
SHA1

aa428cfefd502ddd40b40f8fc14e281865d0a6ec
SHA256

5b6ebd148747550dced64af3014dd41f7f01bee69d8784fc114e28778fe0ef58
SHA512

53ebc7ce32a259762a01fa71f3c59521bae0f2f1ca2f1892cef41198ce21afbf7a2bd5a1ddf5e3909341cfbb369025d8a61abde5e128878000237fc518c5cb8b
SSDEEP

1536:EkoRjESqzQFnWklncpAeuyj/e59bgwaGhqRD/zA/S:GRg0WQn8uvaqqmK

Score

N/A

Malware Config

Signatures

Files

5b6ebd148747550dced64af3014dd41f7f01bee69d8784fc114e28778fe0ef58
.exe windows x86

dafde61324b7c1ca387aa43280580caf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetModuleHandleW
GetLocaleInfoW
GetACP
GetExitCodeProcess
lstrcpynA
UnhandledExceptionFilter
GetThreadLocale
GetOEMCP
FlushFileBuffers
SizeofResource
GetModuleFileNameW
GetTempPathA
GetCommandLineW
DeleteFileA
LoadResource
GlobalHandle
GetSystemDirectoryA
IsDebuggerPresent
WaitForMultipleObjects
lstrcpyA
CompareStringA
VirtualProtect

msvcrt

__p___initenv
_XcptFilter
_exit
__setusermatherr
_except_handler3
_controlfp
_initterm
__set_app_type
_adjust_fdiv
__p__commode
__p__fmode
__getmainargs

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ