6ba2a97d0c6c216c7f7282f0a987e1d57690496aa3395d93668fa2414dcde580 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ba2a97d0c6c216c7f7282f0a987e1d57690496aa3395d93668fa2414dcde580
Size

63KB
MD5

bf82a21c2a7cc3a063057b2c10cdd991
SHA1

514eb89340206ad24628a31f99fc8efb9b4acdf9
SHA256

6ba2a97d0c6c216c7f7282f0a987e1d57690496aa3395d93668fa2414dcde580
SHA512

dcd130a0d9093c833803209b6e47e1a6a29dff8c58cb852916c5858b6e96060f6fefd673763dfa9385da16c4cc5829cb24cddfc32b19dc9aeb0727612c0d81fb
SSDEEP

1536:PGSIQygxPFdMhCzpWW072B0/hNuJIt1/UIfqy8sdW4xeXd:YQyQPFdMhCzpCqB0pQ6ZU2Xs4xeXd

Score

N/A

Malware Config

Signatures

Files

6ba2a97d0c6c216c7f7282f0a987e1d57690496aa3395d93668fa2414dcde580
.exe windows x86

de3666cc0ff7a96763e17ab28d2f8947

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LZInit
LZDone
VirtualBufferExceptionHandler
VDMOperationStarted
RegisterWowBaseHandlers
SearchPathW
HeapAlloc
GetConsoleAliasExesLengthW
GetConsoleCP
SetStdHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE