6a0600151af5437e4e94320b56e4590e3853455bbe1c109a26504458b5d3c439 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a0600151af5437e4e94320b56e4590e3853455bbe1c109a26504458b5d3c439
Size

71KB
MD5

4ba53065fed226c13b334e55cf1c02d6
SHA1

11062033dc5f9c3f67de5c562ca68576fb376c8e
SHA256

6a0600151af5437e4e94320b56e4590e3853455bbe1c109a26504458b5d3c439
SHA512

ca70c4f12d3b558456693dc4a041b126bf5aa78799c44c07cd8c32f4a13d29af1c45192c8e175587a8819876339da101d8591848101dc2b6ddbe3310b89633aa
SSDEEP

1536:oxPJV8TSyyb0evuhp/qi1p9gatIQ4C78AghNUnpgP5V4c40O89aY05Vk9o9:odJWTyb05hlH1pMQ4aL0UnU409505b

Score

N/A

Malware Config

Signatures

Files

6a0600151af5437e4e94320b56e4590e3853455bbe1c109a26504458b5d3c439
.exe windows x86

49e46242baa3b0bd5ced799d6019ac90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NlsResetProcessLocale
NlsResetProcessLocale
_lclose
GlobalMemoryStatusEx
EnumCalendarInfoExW
GetProfileIntA
GetFirmwareEnvironmentVariableA
IsTimeZoneRedirectionEnabled
SuspendThread
LocalSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE