f5730e3653ecb611317757a17a120500459295fe90b98183abd85dfe4d241325 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5730e3653ecb611317757a17a120500459295fe90b98183abd85dfe4d241325
Size

18KB
MD5

17ddd043dbae8d19a4d04b1163707991
SHA1

1ae5e708b7ade33113b52a5725a536244ea6939e
SHA256

f5730e3653ecb611317757a17a120500459295fe90b98183abd85dfe4d241325
SHA512

db4e9ca56468cfdf11ee2d393231fb42de9a2b51b234bf54d8cafc14f20e97f40c81d11b27521c037d1034597b3735fefbeced9ae8bd047cea9bd3d12131a78b
SSDEEP

192:sOoAE28rbL3sk1xyZtQ1HJTaXbiZEkPe861muwlfc1bB5Oufqktvfh5/:svFbjsk1oZ+eLFu81mhA5xqkt

Score

N/A

Malware Config

Signatures

Files

f5730e3653ecb611317757a17a120500459295fe90b98183abd85dfe4d241325
.exe windows x86

4592a51e6fe78d18da25a5d94b0153f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
GetCommandLineA
ExitProcess
CloseHandle

advapi32

CreateProcessWithLogonW

Sections

.text
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ