b05b79e3f70db39622d6a93a17a35070cbfb750fb7107fec13fd1d14563957c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b05b79e3f70db39622d6a93a17a35070cbfb750fb7107fec13fd1d14563957c5
Size

76KB
MD5

e872f8110075f561dd80c7a727f29674
SHA1

0edb5e1fa42c0f21977eb7108e2bc8b13fbb569e
SHA256

b05b79e3f70db39622d6a93a17a35070cbfb750fb7107fec13fd1d14563957c5
SHA512

f28a52a72ae035d94bd94f7a1ef7289127d77cde735b25336f7c0fcb88761a14a5812443e4d04caec83e757b3f889ce488444f87ec6a7ce123eeb9e4d7768ffa
SSDEEP

1536:n4aKLkjNLPEvvvOOKx+7j0JI+tpfOe8pjVrs2ryrd1vUQuq6:4aakjpPE8piDe8Hs2qo

Score

N/A

Malware Config

Signatures

Files

b05b79e3f70db39622d6a93a17a35070cbfb750fb7107fec13fd1d14563957c5
.exe windows x86

b5d4f0d5fac44d0130cbd5cca69be229

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExA
GlobalMemoryStatusEx
LockFile
DosPathToSessionPathW
DeactivateActCtx
GetProcessShutdownParameters
GetVersionExW
GetSystemRegistryQuota
WritePrivateProfileStructW
FindClose
CopyFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE