e5d9b70145536c990a549b7807b739b0e30f7371f68ea29fc20ed774c618e7e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e5d9b70145536c990a549b7807b739b0e30f7371f68ea29fc20ed774c618e7e5
Size

100KB
MD5

fb29c57da9d44272f36c60a8aee6e73f
SHA1

ee981f47178486a7288638810f311d42078b675c
SHA256

e5d9b70145536c990a549b7807b739b0e30f7371f68ea29fc20ed774c618e7e5
SHA512

695b4c1ad2ef28cfd442fa084c52d2a765b5f49bf0168e0c10fcf71dd2526445cb0a6eda79230a8e35fbe76ae265e30c98690cfcb6b505d2c7818936ce5aca01
SSDEEP

1536:v+8dWtDSxoMV52rbBynSNdbZfsMPnxmAIeABMx8SNq5ayw45GSYygs0o3ok5cEWS:v+8dWt9MV5Eonc5HPxNWU4wnyH0oYRt

Score

N/A

Malware Config

Signatures

Files

e5d9b70145536c990a549b7807b739b0e30f7371f68ea29fc20ed774c618e7e5
.exe windows x86

11900be71537d58418005785c35ca3cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
lstrlenA
lstrcpyA
GetModuleHandleA
GetStartupInfoA

msvcrt

free
calloc
rand
memmove
_exit
_XcptFilter
exit
_acmdln
time
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
__getmainargs

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ