6c4ecac9d9c4cb0bef2e5fe7a3c6f61ceb21058e4f688ac832acddfecd27ce4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c4ecac9d9c4cb0bef2e5fe7a3c6f61ceb21058e4f688ac832acddfecd27ce4c
Size

63KB
MD5

624133c23c7d72f0dc14deaa12fd52de
SHA1

ca9d97c87e2eec8383f2f3d0f565a34fe58468f6
SHA256

6c4ecac9d9c4cb0bef2e5fe7a3c6f61ceb21058e4f688ac832acddfecd27ce4c
SHA512

a79c6031eff8e68820c3ae83564d4fd6b35618e7250fcb3059242c98a626a807c17a0d0a42840a4c55c854f86f8f451e1ee882014a3ad2b429eb8c90932c145e
SSDEEP

1536:FRLICtqCHGtipNXJfAgw1ZXbRY57f5cbRV+NKlvbM:ZqCRDCg6ZNi1cb+NK1bM

Score

N/A

Malware Config

Signatures

Files

6c4ecac9d9c4cb0bef2e5fe7a3c6f61ceb21058e4f688ac832acddfecd27ce4c
.exe windows x86

65450ee85c3f72b2f02b8abd4b98b174

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VDMOperationStarted
ConvertFiberToThread
RtlZeroMemory
LCMapStringA
PostQueuedCompletionStatus
GetVolumePathNamesForVolumeNameW
FreeVirtualBuffer
CreateMailslotA
IsBadHugeWritePtr
AllocateUserPhysicalPages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE