6f58ac705918f1d30d0590291ee38b7638e33cd0391871455e1a9cb1a4fb0734 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f58ac705918f1d30d0590291ee38b7638e33cd0391871455e1a9cb1a4fb0734
Size

56KB
MD5

05eed00a090fb0c0e778c7af22d774a0
SHA1

d9e6386af405553669c9751412714ab39f0e6b68
SHA256

6f58ac705918f1d30d0590291ee38b7638e33cd0391871455e1a9cb1a4fb0734
SHA512

6e900fdef92e22e582d4dd6db71da34528c3c17497b387407737fcec5c5619d28e54d8b88d047605dbd36368c3478cf86a8509d9263d9259a56b9244e40d7e3d
SSDEEP

1536:nzzzzYMslQKx9UUtVuvcjdQenGcQwakbMa+d2rlbPSTj:hDK4cueGcQwTbR+dIbPSTj

Score

N/A

Malware Config

Signatures

Files

6f58ac705918f1d30d0590291ee38b7638e33cd0391871455e1a9cb1a4fb0734
.exe windows x86

68e6e6b92968e047f32b1fc94eb38796

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressA
ContinueDebugEvent
GetNumaNodeProcessorMask
BuildCommDCBAndTimeoutsA
OpenEventW
FreeResource
RegisterConsoleIME
lstrcat
GetProfileIntW
GetTapePosition
CreateFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE