905aaee9e9a6ce67c611a7cca02f7b61c39c7f1e1638d05805b858aec5d93675 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

905aaee9e9a6ce67c611a7cca02f7b61c39c7f1e1638d05805b858aec5d93675
Size

3KB
MD5

0d52dbe29d39c9a700eb0c3f7353939c
SHA1

a543db54aaedb87b1f5f1e319b19b457a775a406
SHA256

905aaee9e9a6ce67c611a7cca02f7b61c39c7f1e1638d05805b858aec5d93675
SHA512

c3e3a55bc96040b8291e3dc830ed95acccbb5c30c8e7f9db86c1b35ffeed47fadf8de1fa703c16ff7db9987d06833fd88d2e28c2a0f0253d5dcdfa1c345e5bd9

Score

N/A

Malware Config

Signatures

Files

905aaee9e9a6ce67c611a7cca02f7b61c39c7f1e1638d05805b858aec5d93675
.exe windows x86

4592a51e6fe78d18da25a5d94b0153f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
GetCommandLineA
ExitProcess
CloseHandle

advapi32

CreateProcessWithLogonW

Sections

.text
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ