6b3654a352522525030db1d4125b415c617f2995df3e8422a39ac67a9314a6cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b3654a352522525030db1d4125b415c617f2995df3e8422a39ac67a9314a6cd
Size

148KB
MD5

6fd3bfcfd7800d90b47a928b6b7f8bde
SHA1

cbbecadadfe21ec4b4ece8a063ca81d51f8659e5
SHA256

6b3654a352522525030db1d4125b415c617f2995df3e8422a39ac67a9314a6cd
SHA512

52d7c4ce85228d15cf34b0953bd9344c2187a6f8131da7f791d7f9da2992e435c0a1a865c9434f59cff23609836263578a04ba512922e3283420c2d6efb91952
SSDEEP

3072:3nAPqjNMmnVoBqIMRQxVECSDtl5wwqgtBtSHGq:3nAP2Qq7C8tl5w8A

Score

N/A

Malware Config

Signatures

Files

6b3654a352522525030db1d4125b415c617f2995df3e8422a39ac67a9314a6cd
.exe windows x86

fefcdd163b1c7a380e21eec951f07627

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
time
srand
rand
_snprintf
__p__fmode

kernel32

GetStartupInfoA
CreateThread
WaitForSingleObject
OutputDebugStringA
GetModuleFileNameA
CreateFileA
WriteFile
CloseHandle
GetCurrentDirectoryA
SetCurrentDirectoryA
GetModuleHandleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE