6e4e943eeae52307242fcaf3fa24c1997ad726752adeb4030fcd3c23179edace | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e4e943eeae52307242fcaf3fa24c1997ad726752adeb4030fcd3c23179edace
Size

188KB
MD5

65d0d5bf964a64326d86c8fd6cf3e3e0
SHA1

0d833853123d5ef25d44613625db83deb20b1851
SHA256

6e4e943eeae52307242fcaf3fa24c1997ad726752adeb4030fcd3c23179edace
SHA512

42009c47faeaa994f7271f0a278552c0f92ed8c7503165f3982da3471c8c10eb629d1a13f6a0f5cfc3e58efd5aabcee257f94e41f9b219d6a371ce104dad3cfa
SSDEEP

3072:MhzCG2v+Cbwjsc80Drd2dFdjDrGbi6yQlWUxmeN3rWCi4VMwQljgQ:lv+cw5x2d3IjwURN3rLtVIg

Score

N/A

Malware Config

Signatures

Files

6e4e943eeae52307242fcaf3fa24c1997ad726752adeb4030fcd3c23179edace
.exe windows x86

865df307f560ffebd2e29acda46151be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
FreeLibrary
MultiByteToWideChar
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
ExitProcess

gdi32

CombineTransform
Arc
RectVisible

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ