c5d579662c2192d67cec57722353ad0e1a5358a55814ce9f7a97d40b84e569f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5d579662c2192d67cec57722353ad0e1a5358a55814ce9f7a97d40b84e569f1
Size

495KB
MD5

0e8951f1c4dd91385fa2867f4c657c90
SHA1

d27e61bcae4c90cb66d973585abae88e5877ebc9
SHA256

c5d579662c2192d67cec57722353ad0e1a5358a55814ce9f7a97d40b84e569f1
SHA512

437be0d472681bb3bceda3c4097caaf972ae0507a2e5f222fcfeef345399df50420ff5e81710541c1752bccb7c210f568564ef145c413849966b717ce4d5ebae
SSDEEP

12288:mq/WIU4UzpDJLbArJuEz+Wj9aiMmvXLYLbZyz:qz2daN7Y7+4

Score

N/A

Malware Config

Signatures

Files

c5d579662c2192d67cec57722353ad0e1a5358a55814ce9f7a97d40b84e569f1
.exe windows x86

fe1a336913f8d4ea6224714500ca1d8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
GetModuleHandleA
IsValidCodePage
GetBinaryTypeA
CreateWaitableTimerW
HeapCreate
GetStdHandle
GetDriveTypeA
lstrcmpiA
GetExitCodeProcess
lstrcatW
FileTimeToLocalFileTime
EndUpdateResourceA
lstrcmpiA
SetLastError
TlsFree
lstrcmpiA
lstrcmpiA
Sleep
CreateNamedPipeA
GetPrivateProfileStringA
GetTickCount
lstrcmpiA

ntmarta

AccConvertAccessToSD
AccFreeIndexArray
EventGuidToName
EventNameFree

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 488KB - Virtual size: 1016KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ