c5fb05c02920c3cd989879862b85973b0549a5c222fc31540f31095f7423bc30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5fb05c02920c3cd989879862b85973b0549a5c222fc31540f31095f7423bc30
Size

25KB
MD5

8b1896fbfdc11f22d3425cfdffdf1543
SHA1

15f552a1834863c82e56f8e556d67af8574836df
SHA256

c5fb05c02920c3cd989879862b85973b0549a5c222fc31540f31095f7423bc30
SHA512

e475079a433aa330f1c424c18c8e2eb6451c03a5e16a6b4d8d9ccfa42798c444c5cfb034127173fb2c739fb30801c5f8543278653e4307caa56c49ce17eae772
SSDEEP

384:l6exbQfDFKqgyv8wnY7waVU/8avdfa9OK+CBDiwIIX9ajuEh3DyiH:lx0Y7wy0ndfzeiw/tajh3OiH

Score

N/A

Malware Config

Signatures

Files

c5fb05c02920c3cd989879862b85973b0549a5c222fc31540f31095f7423bc30
.exe windows x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE