a5cdec2e748f5df64b30a849ac18b112e1b07a2916781f0c54d693e03fa6c8d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5cdec2e748f5df64b30a849ac18b112e1b07a2916781f0c54d693e03fa6c8d8
Size

117KB
MD5

1f68a75b2223a62f05846d02616668a8
SHA1

361d42eaaf7b614b01dda4f06564a4ba530d2c99
SHA256

a5cdec2e748f5df64b30a849ac18b112e1b07a2916781f0c54d693e03fa6c8d8
SHA512

244ba01477622adb3a6e0db00c8e16f6f49be14b1f8e98f601c191b75593a96ee072c36af24648af48758ba363cd137c92e1f984e73912020a183a9a19615b28
SSDEEP

3072:RW+S2H/2du+0SOpN53xzPax2pRWFkItbGsNYFfP:RWA/2du+0SQLPe2+kI1E

Score

N/A

Malware Config

Signatures

Files

a5cdec2e748f5df64b30a849ac18b112e1b07a2916781f0c54d693e03fa6c8d8
.exe windows x86

cf569fbc5de712dc7ff76b5a8130c524

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetExitCodeProcess
CompareStringA
GetProcAddress
MulDiv
ExitProcess
SetLastError
InterlockedCompareExchange
VirtualProtect

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ