5e6355fc4a52124e05630fcef395c261af1a4b4bed4e2797b45e6f45b5452063 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e6355fc4a52124e05630fcef395c261af1a4b4bed4e2797b45e6f45b5452063
Size

828KB
MD5

dab9bc2a5d25ba4661ef7e79102f5d8c
SHA1

3cab59e992a62bd7fac8d04501f970868ea56aa9
SHA256

5e6355fc4a52124e05630fcef395c261af1a4b4bed4e2797b45e6f45b5452063
SHA512

3b877a2632515c698c64af2d33b769d9b690f25ad01c75a2d0b39bb397717e6333f3b3f71e1f7c2d884b96b2f0a1b81f70b5cb67e8f3e18efbb05da629772ff8
SSDEEP

24576:CDzjS+fOi0P1vl6hcFiUTtawxsQ4FF0DYVx:CtfOiA9lc0AXNz

Score

N/A

Malware Config

Signatures

Files

5e6355fc4a52124e05630fcef395c261af1a4b4bed4e2797b45e6f45b5452063
.exe windows x86

be1cf8ec8e2fd531b304bd1cd4a177dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetPrivateProfileIntW
GetTimeFormatA
GetProcessHeap
ReadConsoleW
GetStringTypeA
WriteFile
HeapCreate
CompareStringW
GetLastError
GetVolumeInformationA
GetModuleHandleA
CreateSemaphoreA
lstrcatA
GetDiskFreeSpaceW
HeapFree
GetCurrentDirectoryA
GetEnvironmentVariableW
GetShortPathNameA
lstrcmpW

esent

JetDelete@8
JetCloseDatabase@12
JetCloseTable@8
JetInit@4

Sections

.text
Size: 20KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 804KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ