a5c594b335e3db3f775ea700df381ca563c1b8fcb857e401b588c986726756a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5c594b335e3db3f775ea700df381ca563c1b8fcb857e401b588c986726756a2
Size

134KB
MD5

c21a860a8cdc02b41549869116139b5c
SHA1

485656c8fea1b4461da07184dd4cae2c4370d84e
SHA256

a5c594b335e3db3f775ea700df381ca563c1b8fcb857e401b588c986726756a2
SHA512

c562ebe87e3c21157c99d2bd14cbff58739e6368465ae3841d7eaf8f5ab76a58897349de3f30a83942d16395929ac0d4826b99671e990caf2e218da2d6c5a0df
SSDEEP

3072:X5WD7en5p0sNJJo+pwNx8jquPJi0cBrsbB5dZW5DgM+Q:gPe4TqqmWBrst5jSDs

Score

N/A

Malware Config

Signatures

Files

a5c594b335e3db3f775ea700df381ca563c1b8fcb857e401b588c986726756a2
.exe windows x86

35b81a494352e183f1324c904f5fa3da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetUserNameW
IsValidSid

kernel32

GetWindowsDirectoryW

Exports

Exports

GeometryOutput
GeometryInput
?DunnoCapatice@@YGPAXUtagSIZE@@@Z
?ForceCountSys@@YGPAXUtagSIZE@@@Z
?LabelRegit@@YGPAXUtagSIZE@@@Z
?LocalTimerOn@@YGPAXUtagSIZE@@@Z
?SemiForte1@@YGPAXUtagSIZE@@@Z
?SemiForte2@@YGPAXUtagSIZE@@@Z
?SemiForte3@@YGPAXUtagSIZE@@@Z
?SemiForte4@@YGPAXUtagSIZE@@@Z
?SemiForte5@@YGPAXUtagSIZE@@@Z

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ