6a14c3c83b2dbdb52b817e1bf6cf010ab848b03fa81f7a9a8abd5076e5cf7c95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a14c3c83b2dbdb52b817e1bf6cf010ab848b03fa81f7a9a8abd5076e5cf7c95
Size

612KB
MD5

5bc615fbecfb86549e84e9d71b759380
SHA1

19bd8538436829b33300c3e17280e4d16f8c6c19
SHA256

6a14c3c83b2dbdb52b817e1bf6cf010ab848b03fa81f7a9a8abd5076e5cf7c95
SHA512

89c338cf9f4dc89a86ec1c248f073657bd91af3330ebf034482615e89950785b13d8b06322cc9289d58a0bf19aba7e5aa57d0b1f91af72fee51ed3dc210da629
SSDEEP

12288:fLVgH1ecCg/8Rr7UrGc1idr1RiPJwWl8PAP6ry7QUYAc3oZx:z2H1evm85UrY4JwW+PUQy7bci

Score

N/A

Malware Config

Signatures

Files

6a14c3c83b2dbdb52b817e1bf6cf010ab848b03fa81f7a9a8abd5076e5cf7c95
.exe windows x86

8d6991ce60ffb26c3d9277206997d44f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

xfonts

?XFontsDllMain@@YGHPAUHINSTANCE__@@0PADH@Z

kernel32

HeapDestroy
GetVersionExA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetStringTypeW
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE