c6e20b6e9fdd68741f34979642cacdcc7e4beacac332a660ba27a47d2602a563 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6e20b6e9fdd68741f34979642cacdcc7e4beacac332a660ba27a47d2602a563
Size

490KB
MD5

99dc814355ab5f9918e4d7237deef786
SHA1

92e55c39cc213acd8bb9c2d009dcf821392bc20d
SHA256

c6e20b6e9fdd68741f34979642cacdcc7e4beacac332a660ba27a47d2602a563
SHA512

0c53d4b3acfcc1896e084b46995fec578b7b89b158815b01ccf291b5e990e2bd65b9722023f797160040ec66d9f42c06bbd07f276c564e6669c20da54afbd181
SSDEEP

12288:CaQYj6kezMF3u+vvFeIx8QCkxpPdJQnpxS6f4tRI:CBgl3jkIyQfxxAXZuK

Score

N/A

Malware Config

Signatures

Files

c6e20b6e9fdd68741f34979642cacdcc7e4beacac332a660ba27a47d2602a563
.exe windows x86

3b16ef3c3dc6e7010a038b6325f0a226

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess
LoadLibraryA
VirtualProtect
GetSystemTime
ExitProcess
lstrcatA
CloseHandle
GetModuleFileNameA

user32

MessageBoxA
SetCapture
ReleaseCapture

Sections

CODE
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE