f6e03b9cdcec501f6f8407ceb68abc00befa42ef97d857af1502c4130fdc1064 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6e03b9cdcec501f6f8407ceb68abc00befa42ef97d857af1502c4130fdc1064
Size

320KB
MD5

6fac881c26bdb0d270acef29f18455c0
SHA1

c03d9571225ddde16ea48437b6cb4c4189be37af
SHA256

f6e03b9cdcec501f6f8407ceb68abc00befa42ef97d857af1502c4130fdc1064
SHA512

ba4086bc1075ed1708ea65e13a12d6d3f22ecf9bf99d144046d244be4130d3681c3caaf411837984b8dc1938b04ae25b03d8a1fca07d5e4402234739d64561f4
SSDEEP

6144:uuA6JO9czvH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:uJYO9if2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f6e03b9cdcec501f6f8407ceb68abc00befa42ef97d857af1502c4130fdc1064
.exe windows x86

209814b0474551ede4f051f11e12ede2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZRead
GetCurrencyFormatA
CreateHardLinkA
FindNextFileA
SetNamedPipeHandleState
SetProcessAffinityMask
InitializeSListHead
EnumCalendarInfoExW
DecodeSystemPointer
FreeLibrary
QueryDosDeviceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE