d5ecf072c8848d3317f7593acaf4b2ef9453de15085ca3921808cec19db0f03f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5ecf072c8848d3317f7593acaf4b2ef9453de15085ca3921808cec19db0f03f
Size

52KB
MD5

755a89b2aad27dd76898f38511b7f407
SHA1

5c01334168191f5ec92eb75775ddc373ad579fc6
SHA256

d5ecf072c8848d3317f7593acaf4b2ef9453de15085ca3921808cec19db0f03f
SHA512

f31c23e09cccd57a1c43f8b98203c11ac4ec00cfc13d398ea266744bb3ce10f09ccf5a22ac724fcff20be7315890d6ee624e560c0bcec6caedd4c8e2c104bb47
SSDEEP

768:xAlyBJScpWpcRa4g3BrZxqyq2X/zdPX80PncX951q:xAlSb4QgdqIrdlcX97

Score

N/A

Malware Config

Signatures

Files

d5ecf072c8848d3317f7593acaf4b2ef9453de15085ca3921808cec19db0f03f
.exe windows x86

0f6b6d23ac689db75c9b584b28c579ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
DuplicateHandle
WaitForMultipleObjects
GetProcAddress
SetEndOfFile
ResetEvent
lstrcpyW
FindFirstChangeNotificationW
ResumeThread
InterlockedIncrement
VirtualFree
GetModuleHandleW
GetUserDefaultLangID
MulDiv
SetCurrentDirectoryW
TerminateThread
GetCurrentThreadId
GetFileSize
CreateThread
FindFirstFileW
GetFileAttributesExW
SetThreadPriority
FreeResource
SetLastError
GlobalUnlock

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE