de6c1c92f60c47e65aaa583e76affe182fc0e17283bfc520726270a4fe5f0a6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de6c1c92f60c47e65aaa583e76affe182fc0e17283bfc520726270a4fe5f0a6d
Size

320KB
MD5

a1abc5e4befb01e0e94847b7ef206940
SHA1

679751aa25a8509e238dda3260a9a6ffbda8882a
SHA256

de6c1c92f60c47e65aaa583e76affe182fc0e17283bfc520726270a4fe5f0a6d
SHA512

2f48d8c6910425ba47fd3119250467b5dc1eb79f44b29e8097ac2f0ef7cbe44646a6581fcb111d0c390a5d0c44971dd641717f90fa36948f165d4b98510bc5b2
SSDEEP

6144:gfjOPfM0sVRIBY5H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:+jOZBBA2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

de6c1c92f60c47e65aaa583e76affe182fc0e17283bfc520726270a4fe5f0a6d
.exe windows x86

5e9f9953ce22de3ba285e14b0160cabe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapExtend
GetVolumePathNamesForVolumeNameW
SetMailslotInfo
GetProcessTimes
UpdateResourceA
DeviceIoControl
GetNamedPipeInfo
Thread32First
OpenEventW
CancelIo
DisconnectNamedPipe
PrivMoveFileIdentityW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE