6633568fd0cfe202fd35679dd8b7fe66e7c75e04efcb21bc8d88c4be815d83e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6633568fd0cfe202fd35679dd8b7fe66e7c75e04efcb21bc8d88c4be815d83e9
Size

188KB
MD5

651c017ac7cb7fe27a8ae125cb212fc0
SHA1

3275aa1ceeca6b49ce43929d8b939b544b7b8410
SHA256

6633568fd0cfe202fd35679dd8b7fe66e7c75e04efcb21bc8d88c4be815d83e9
SHA512

736169411c6dba7a3a61fddf0b36c754107641454744bf43db80e485464bbfa118c8884e77f082e9db6f9fae5a50123b0fcd403756377c559aaa43c6a1a7ce95
SSDEEP

3072:YLnh6wgfb0QiXTb3nZK7oY3nKSF4gRUpnVaLqRqoLpwmlSLG:YLnhM0QcPGognaccnVau1pwP

Score

N/A

Malware Config

Signatures

Files

6633568fd0cfe202fd35679dd8b7fe66e7c75e04efcb21bc8d88c4be815d83e9
.exe windows x86

d84a1f1a5f6dc478461d88b1a559382f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDeviceGammaRamp
RectVisible
SelectFontLocal
CombineTransform

kernel32

ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LoadLibraryA
MultiByteToWideChar
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ