59f6448e777bb460abecb4a30b7ce06df59e72e2455ba715c2bb1e5124af3a18 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59f6448e777bb460abecb4a30b7ce06df59e72e2455ba715c2bb1e5124af3a18
Size

817KB
MD5

1cca7f0267cfcd4b5c5d7046be21fa84
SHA1

5f7ff8b7d8f40723308ddfd258ede5e0b9565bef
SHA256

59f6448e777bb460abecb4a30b7ce06df59e72e2455ba715c2bb1e5124af3a18
SHA512

082ea65aca4d85a7cdda1c624ac0e9f958947b450fcf63681022a4992ee67e0c8c3f1822fb77dc7ec8770433332ac0be0aa04023f9131be0d3dc2afbbcb893f7
SSDEEP

24576:AIkxplC0jSd+YRNatEunGd3kRuVzzOW+0oxE:nClR+BytWdlzf+V

Score

N/A

Malware Config

Signatures

Files

59f6448e777bb460abecb4a30b7ce06df59e72e2455ba715c2bb1e5124af3a18
.exe windows x86

d779ee68a0183586a616aa775d6f7331

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentDirectoryA
VirtualProtectEx
lstrcpynA
lstrcatA
GetCommandLineW
GetModuleHandleA
OpenMutexW
DeleteFileW
lstrcpynA
lstrcpynA
lstrcpynA
FormatMessageW
VirtualFree
lstrcpynA
ReadFile
GetDiskFreeSpaceW
GetPrivateProfileIntA
lstrcpynA
GetFileSize
lstrcpynA
GetCurrentThreadId
lstrcpynA
lstrcmpA
ReadConsoleA
SetThreadPriority
lstrcpynA
lstrcpynA
CreateDirectoryW
GetFileType

certcli

CAEnumNextCA
CAEnumFirstCA
CADeleteCertType
CAFindByCertType

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ