6fdbbe3c2b127f95af8e05cb66fff9d2bb0dac20931db7b483d42817ccda7ed1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fdbbe3c2b127f95af8e05cb66fff9d2bb0dac20931db7b483d42817ccda7ed1
Size

320KB
MD5

7b92e267809862784b61ae0ba1e30af0
SHA1

d5ac5af0e0185a2950b1d0df99988bfb9e717ce6
SHA256

6fdbbe3c2b127f95af8e05cb66fff9d2bb0dac20931db7b483d42817ccda7ed1
SHA512

7cc82b2a1aacbb0aa5b850ac8f5ef4424a12ac66f06f4afd25d77b0e4ed3994dd4aff4ce5dd9c0191a62c7daa0f117a46325d471abb2ff69c10767eee729c6a4
SSDEEP

6144:sK2OwPH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:sxO42EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

6fdbbe3c2b127f95af8e05cb66fff9d2bb0dac20931db7b483d42817ccda7ed1
.exe windows x86

a04334e6eba8e89daa44ae22f04d9a15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalWire
SetLocalPrimaryComputerNameW
IsValidLanguageGroup
GetModuleHandleA
GetProfileSectionA
SearchPathW
SetConsoleCommandHistoryMode
RtlCaptureContext
GetVolumePathNamesForVolumeNameA
IsSystemResumeAutomatic

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE