8e6b0661894ca0f37e5eea63c5f05a99d5e43b9d0c68872c859acd03b00a3fe2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e6b0661894ca0f37e5eea63c5f05a99d5e43b9d0c68872c859acd03b00a3fe2
Size

320KB
MD5

a25d0461a1d0ab3a00c874ba27c0dd90
SHA1

7c79a8fd21e547ae3649f2b2a0e627c494abd9a9
SHA256

8e6b0661894ca0f37e5eea63c5f05a99d5e43b9d0c68872c859acd03b00a3fe2
SHA512

54798ec78fa7c2ce3d14cb06d26f861ae4b0db60470a54891ab95b3a16973a0a06fd103471c970d00e30e37b31fc2e3167ef91d6d8aef40ad1fa3c421f27131b
SSDEEP

6144:aS6W8eH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:aS6fE2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

8e6b0661894ca0f37e5eea63c5f05a99d5e43b9d0c68872c859acd03b00a3fe2
.exe windows x86

d171eb54fe88ccd7f408dab4691e73d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeNameForVolumeMountPointW
VDMConsoleOperation
GetProfileStringW
RegisterWaitForInputIdle
IsValidLanguageGroup
GetQueuedCompletionStatus
GetProfileIntA
HeapCreate
RequestDeviceWakeup
BaseProcessInitPostImport

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE