b6ae3192902beff16ecee28b864cc291af855d9025b26c13920a4aeaae3b9f65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6ae3192902beff16ecee28b864cc291af855d9025b26c13920a4aeaae3b9f65
Size

320KB
MD5

67a94e869e60e1733dc450c40aab41d0
SHA1

25ce8b8108f47f6455e82eca50b373f59fa0b037
SHA256

b6ae3192902beff16ecee28b864cc291af855d9025b26c13920a4aeaae3b9f65
SHA512

4e6be43097b4fc319ad9fe294ee891dd93427fe0b100459468fa54fc5ccd84821623564d17ab6c393d734d145824a9f1db0515c9123a100c579bc002cd2b8d33
SSDEEP

6144:jFHpcU82DH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:jFJbr2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

b6ae3192902beff16ecee28b864cc291af855d9025b26c13920a4aeaae3b9f65
.exe windows x86

d4c2e1fe809bfaf79eb4f31fc38ea715

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapUserPhysicalPages
SetVolumeLabelW
FindResourceExA
ReadConsoleInputExA
SetVolumeMountPointW
LZInit
Heap32First
GetTapeParameters
OpenProcess
BaseQueryModuleData
SetLocalPrimaryComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE