fe49a9e856e9c762a56064dc31f4a1854ef0c49a0fe6c06eb794d7dd1d8078e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe49a9e856e9c762a56064dc31f4a1854ef0c49a0fe6c06eb794d7dd1d8078e3
Size

58KB
MD5

deebf8b4a17cb18c9f96839ae9d2cc29
SHA1

4a0c91d175d0cadfb30a58851f9f17f9e8b9d157
SHA256

fe49a9e856e9c762a56064dc31f4a1854ef0c49a0fe6c06eb794d7dd1d8078e3
SHA512

04f46e5e989f9e63904ad4d6da574d5e00d8f7c9a7fcdd79b20e6a5bb7348cab43876811a71b5df3ce5204a0a9800184ba276cdab4fff9ec12949d74666a92ad
SSDEEP

768:HJqUL2uYblOQ5P36hM0r9HQs15PlNwhsfp8/QzT12Ig19FUpSk/qwJd:8Uc5BSv9jNssfp8/QzT1r+6pSk/qwJ

Score

N/A

Malware Config

Signatures

Files

fe49a9e856e9c762a56064dc31f4a1854ef0c49a0fe6c06eb794d7dd1d8078e3
.exe windows x86

165e56eaf3867b975956eb6dd08c5ae8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
DeleteFileA
CreateFileMappingW
GetProcessHeap
DeleteFileA
GetModuleHandleW
CreateDirectoryA
GetLastError
GetShortPathNameW
GetVersion
HeapFree
GetStringTypeW
GetStringTypeW
SetEnvironmentVariableA
GetModuleHandleA
GetStdHandle
CloseHandle
GetProcessHeap
GetConsoleTitleA
SetFilePointer
SetCurrentDirectoryA
DeleteFileA
GetExitCodeProcess

mstscax

DllUnregisterServer
DllGetTscCtlVer
DllRegisterServer
DllCanUnloadNow

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rs
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ