5d2c49c703cbe5981e44f6965027f42e1a914fcc75bee3ad73138cb1781e4417 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d2c49c703cbe5981e44f6965027f42e1a914fcc75bee3ad73138cb1781e4417
Size

400KB
MD5

58ce236244ae72a5e626f872a4936260
SHA1

80e098b2e0beba762b164a2133554098ade81e0d
SHA256

5d2c49c703cbe5981e44f6965027f42e1a914fcc75bee3ad73138cb1781e4417
SHA512

b5ed839d3fbc23116517d7e5b26c8cd58dd834221a872d9a2a4595eb45a5e52cfaef4f5e7431fea93810c77d25942d15d08024dea0f8d596721a7b76a26d22a3
SSDEEP

6144:n0jEukUAz+rWc4mhfKVf/ZEG7OPi0IGNzJo1OTkr8rYQ0fn6UjD+9aOdlOp4CQ:nUGtsfKVfaGqPFau4U2PZjDEljOiC

Score

N/A

Malware Config

Signatures

Files

5d2c49c703cbe5981e44f6965027f42e1a914fcc75bee3ad73138cb1781e4417
.exe windows x86

1b231b81a05222f23b07a1a35654c7c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetModuleHandleW
CreateFileMappingW
SetVolumeLabelW
CreateSemaphoreW
GetACP
FatalExit
DeleteFileA
GetStringTypeW
GetShortPathNameW
GetProcessHeap
GetStringTypeA
GetConsoleAliasA
SetEnvironmentVariableA
DeviceIoControl
LoadLibraryA
SetCurrentDirectoryA
VirtualAlloc
DeleteFileA
CreatePipe
WriteConsoleW
CreateMailslotA
InitializeCriticalSection

mshtml

ShowHTMLDialog
DllEnumClassObjects
ShowModelessHTMLDialog
ShowModalDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 393KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE