53aa51fd27e464fd9e727759ba143252051b669cac20a7c0c1144b02fe25ef40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53aa51fd27e464fd9e727759ba143252051b669cac20a7c0c1144b02fe25ef40
Size

416KB
MD5

05a75d97b0b59189ea7e6b8cca935f20
SHA1

ee5f4bb5ce9d388594a8aa2c98070caf541ea965
SHA256

53aa51fd27e464fd9e727759ba143252051b669cac20a7c0c1144b02fe25ef40
SHA512

165fd40a4614a0143ecacec7af57e217d892b3e7117428cd19450cdfa326db14e558dc091a6fa2b7753badf77c4646273fbad4e07dea1543c48a023e8565e777
SSDEEP

6144:n2dtq9OCvAI0Y/qMjUlofaeExV3a+e5qb8wAp5Ey+W0HXQGkJrx0Ph4orLCR5yMK:KivNiMDpExIpGrQnVxBoSh6DR0APt+Y

Score

N/A

Malware Config

Signatures

Files

53aa51fd27e464fd9e727759ba143252051b669cac20a7c0c1144b02fe25ef40
.exe windows x86

2b0ae12474a2c2db48f62f92f45cc2d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
SetEnvironmentVariableW
GetModuleHandleA
LoadLibraryExW
GetDiskFreeSpaceA
Sleep
InterlockedIncrement
FindResourceW
lstrcmpA
HeapCreate
GetLongPathNameW
GetExitCodeProcess
lstrcmpiA
Sleep
GetPrivateProfileIntW
GetFileAttributesA
Sleep
GetPrivateProfileSectionA
CreateDirectoryA
InterlockedExchange
GetDiskFreeSpaceA
SetFilePointer
WaitForMultipleObjects

catsrv

DllCanUnloadNow
GetCatalogCRMClerk
CreateComponentLibraryTS
OpenComponentLibraryTS

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 410KB - Virtual size: 920KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE