ad5cd77d5c57f32e9807a651b859359be881599dba2fbe21d3ed06156d02272c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad5cd77d5c57f32e9807a651b859359be881599dba2fbe21d3ed06156d02272c
Size

1.1MB
MD5

6c5f615621cee8618183ec4390132d87
SHA1

d209ea2abc935129562b5f01043f06954cb311f4
SHA256

ad5cd77d5c57f32e9807a651b859359be881599dba2fbe21d3ed06156d02272c
SHA512

bfe2509dc123937fb8b9f80407d6862de27e40cf733e29db83c89f3bfa9034204105c063da76eabaf83fbb39c847cd58bb71c14dadf3067cf0c5451a23a9ce07
SSDEEP

24576:xZIEaDaTg5q4P5n33jAJzwiMoGWvaSRDH2N:xZnaDAg5q4F3zC0iMdWVFS

Score

N/A

Malware Config

Signatures

Files

ad5cd77d5c57f32e9807a651b859359be881599dba2fbe21d3ed06156d02272c
.exe windows x86

0e7f2ecb02bc827deb4a60c2fd52abeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetModuleHandleA
GetUserDefaultLCID
GetCommandLineW
GetSystemDefaultLCID
GetCurrentProcess
GetSystemDefaultLangID
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetCurrentThread
GetVersion
HeapAlloc
GetProcessHeap
InterlockedIncrement
GetProcAddress
InterlockedCompareExchange
LeaveCriticalSection
LoadLibraryA
CloseHandle
MultiByteToWideChar
IsDebuggerPresent
WriteFile
VirtualFree
GlobalAlloc
WaitForSingleObject
LockResource
LoadLibraryW
SetFilePointer
GetModuleFileNameW
CreateThread
FreeEnvironmentStringsA
SetEvent

Sections

.text
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ