06fb1d6ecfe021ac23120f50bc6a4d7e2503e3cbea2c8556a757004d0b422c50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06fb1d6ecfe021ac23120f50bc6a4d7e2503e3cbea2c8556a757004d0b422c50
Size

76KB
MD5

215682e87ac11c2d4e2f61999e18bca1
SHA1

615ab157fa3a8814ba7146835f8b250d7b2505a7
SHA256

06fb1d6ecfe021ac23120f50bc6a4d7e2503e3cbea2c8556a757004d0b422c50
SHA512

0085c4c6872eefd5737469e75213b4c3e6f6573a8018f2fd1b7438353d5055a037a727def6d9bbefafbdde7f0734f54ffd6b30a1757a93004fb56d3c66054981
SSDEEP

1536:QRG42hlCp870bgFfmzydTBc2RQTrjCzvENf1BnJNP7dcF:QRKhlz70bQuzyd9ECANf1NjdY

Score

N/A

Malware Config

Signatures

Files

06fb1d6ecfe021ac23120f50bc6a4d7e2503e3cbea2c8556a757004d0b422c50
.exe windows x86

f28ba7078c5dce1465433df202ba499e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
SetProcessShutdownParameters
VerSetConditionMask
GetThreadIOPendingFlag
EnumSystemLocalesA
AddAtomA
ScrollConsoleScreenBufferA
MapUserPhysicalPagesScatter
BeginUpdateResourceA
SuspendThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE