c18e91efb9d59361ab82494fb9c054baa8bbbac4c5b707d8cceee39343125ba6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c18e91efb9d59361ab82494fb9c054baa8bbbac4c5b707d8cceee39343125ba6
Size

37KB
MD5

9e0e027ad9d6a0c93dff29d415f256d0
SHA1

813311c833d4037f286bb72aba228b22c5470344
SHA256

c18e91efb9d59361ab82494fb9c054baa8bbbac4c5b707d8cceee39343125ba6
SHA512

54bd7041759a32c0506d39582fc4d137e04956ed895055bbd56a62ac80489964e9ae11c14e337a01b210293cbf82b6538b7b1a711d7c2469ba0fe82177563c21
SSDEEP

768:+gJ/QD3lVVgz7aSPReR/ZC95/mE2CGWqhZQkAxdHGHd8cBUOpDB4W533EGV/d:+gJIDVEz7pp2RC95/YlLQkqmZvpOW5n/

Score

N/A

Malware Config

Signatures

Files

c18e91efb9d59361ab82494fb9c054baa8bbbac4c5b707d8cceee39343125ba6
.exe windows x86

92009019dee90696f2364d47b68ae436

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalW
CreateFileW
ExitProcess
GetFileSize
GetModuleFileNameW
GetThreadContext
GlobalAlloc
ReadFile
ResumeThread
VirtualAllocEx

ntdll

NtSetContextThread
NtWriteVirtualMemory
ZwUnmapViewOfSection

Sections

.TEXT
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE