c6db2ed65cc4f20cad7795015131c26bdfd6b1e916c699817c7b868f50a861bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6db2ed65cc4f20cad7795015131c26bdfd6b1e916c699817c7b868f50a861bb
Size

9KB
MD5

77e58004e9a8f21b93f5f3bb58016c06
SHA1

d7337b99a66674acc99eb52b40444643cdb4de16
SHA256

c6db2ed65cc4f20cad7795015131c26bdfd6b1e916c699817c7b868f50a861bb
SHA512

f1d1ac4021a1e2a38fc426d3957bb947143b41d57ef24bf26fa4098bed7b2fd806da27ec17358a0785788308eb1bf9e288704cd5345fccf9059293f6050ef4d3
SSDEEP

192:XWxPIPPlPPd2QXIchfJHKXJGwPHY68awkzai1enQmHhyezdN5+5+IUK/v:mxqReR5b7zKM+IUCv

Score

N/A

Malware Config

Signatures

Files

c6db2ed65cc4f20cad7795015131c26bdfd6b1e916c699817c7b868f50a861bb
.exe windows x86

67f64dc42facb88ba12c7c0a92e5716b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
ExitProcess
GetModuleHandleA
GetCommandLineA
CreateEventA
GetProcAddress
lstrcatA
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
WaitForSingleObject
CloseHandle
SetFileAttributesW
WinExec
SetFileAttributesA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE