5b91c24ff607836f247c6a3da6a4bac0ad5955482041bdc8e86e1cca15303b62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b91c24ff607836f247c6a3da6a4bac0ad5955482041bdc8e86e1cca15303b62
Size

816KB
MD5

c3a780b39f33db541ddd4a7289d17d37
SHA1

98f35611c99e3af26465504499d2c0a83900020a
SHA256

5b91c24ff607836f247c6a3da6a4bac0ad5955482041bdc8e86e1cca15303b62
SHA512

8641560a87badcb1bc9803d5a6c0314757911f4dcbd12a48d62ce4395dfeb9037cd15e0772719f29ded6e8d8aa9a3c14762a4eec1c2acb7dca413973cab7d654
SSDEEP

12288:wcFY6yL/gZDFXxxDLCaClxGFuhtUGSK7x+aiLh/0dgN8LJ4Dce0J08SLR9J:wgY6yL/MCQFutHzgRGgN894DHz

Score

N/A

Malware Config

Signatures

Files

5b91c24ff607836f247c6a3da6a4bac0ad5955482041bdc8e86e1cca15303b62
.exe windows x86

d8e136eda0d90c113f5709971c0a8fd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
GetFileSize
GetModuleHandleA
lstrcpynA
lstrcatA
FormatMessageW
OpenMutexW
GetCurrentDirectoryA
GetCommandLineA
CreateDirectoryW
WriteConsoleW
TlsGetValue
ReadFile
VirtualFree
GetCurrentThreadId
lstrcmpA
VirtualProtect
SetThreadPriority
lstrcpynA
lstrcpynA
lstrcpynA
GetDiskFreeSpaceW
lstrcpynA
DeleteFileW
lstrcpynA

certcli

CAEnumNextCA
CADeleteCA
CADeleteCertType
CAEnumFirstCA

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE