6a62cbba70bff309f8d73ea5e1c37fc368d598173f4ef2e146afba2011c28d4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a62cbba70bff309f8d73ea5e1c37fc368d598173f4ef2e146afba2011c28d4c
Size

57KB
MD5

46d27d2ccaa90aec3e1ebdbbb51f6d2a
SHA1

7ac140ed3d5f98931658f7a663f30628f34b3f6b
SHA256

6a62cbba70bff309f8d73ea5e1c37fc368d598173f4ef2e146afba2011c28d4c
SHA512

7ed7858a00c51be6aee654fff7581e0b7f10522ac50e26ca90f51503f8bd498a667eb52dd25ee038a8b7430e6a21083b3e4de2ab565da4eea7d59275999cd4fd
SSDEEP

1536:k/DBopja3qu3X+BCpBeHFpKVoUvJlMVMoF8W++m4nz:iDBqEL3Xr4F4fJ6VB++m4nz

Score

N/A

Malware Config

Signatures

Files

6a62cbba70bff309f8d73ea5e1c37fc368d598173f4ef2e146afba2011c28d4c
.exe windows x86

7d1b8fd912a0d32e925562886d61343e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugActiveProcess
ExitProcess
DeleteFileW
SetFirmwareEnvironmentVariableW
UnlockFileEx
CreateIoCompletionPort
FindResourceExW
CopyFileExA
QueryWin31IniFilesMappedToRegistry
EnumLanguageGroupLocalesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE