c5410780a61eabc7a8d0a617e1e5cee091341ea89c45871daa237e213221a291 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5410780a61eabc7a8d0a617e1e5cee091341ea89c45871daa237e213221a291
Size

513KB
MD5

6845e8dbef74f3516ca5ab22f17c51af
SHA1

794a37854466713d0b3cd2a6e4811227a9c98da7
SHA256

c5410780a61eabc7a8d0a617e1e5cee091341ea89c45871daa237e213221a291
SHA512

f879d85928440bc90dd7d8fd449c2ba2bcb268c248a93d00c736aab891a810789686041c181faa9b0ed64cc69cd9a52d8a96dd555fb5aad2a4dccfa6b65a8239
SSDEEP

3072:kEFiaD0Fv/O6rvIScj3znsdfTSD1GAQq0SqlXDYZkr0qnfetvimSpmMb/GOdrxpZ:ZFij3FrvZcfnsdf8UptVr6B4JH

Score

N/A

Malware Config

Signatures

Files

c5410780a61eabc7a8d0a617e1e5cee091341ea89c45871daa237e213221a291
.exe windows x86

7ee6279baf9cb1b427f6075a5e93f210

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessShutdownParameters
SetConsoleTextAttribute
DeleteCriticalSection
SetVolumeLabelW
GetLocaleInfoW
LZRead
lstrcatA
GetCommModemStatus
GetNextVDMCommand
WritePrivateProfileSectionW
lstrlenA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE