6b6841207bf54b0ddacda7964cf7e0d397498da5c59c22d199bf2566a633bb84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b6841207bf54b0ddacda7964cf7e0d397498da5c59c22d199bf2566a633bb84
Size

320KB
MD5

a25766e9d835a78b9b27c089b440a9e0
SHA1

6720141bdc77f85326e0e8bada0061ac0a0bc74e
SHA256

6b6841207bf54b0ddacda7964cf7e0d397498da5c59c22d199bf2566a633bb84
SHA512

1e1de09bff50267959673f86fc86bac7ab36e8f3af2069d893483a417a6538aa997cf4f530ba5ea7ca6b5fcfb029d1a15b5f992400b906e0ccbbb6f563751852
SSDEEP

6144:GTg80bVIH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:GU8YU2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

6b6841207bf54b0ddacda7964cf7e0d397498da5c59c22d199bf2566a633bb84
.exe windows x86

08aa27dd02171312a62c8862f111eee5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameExA
IsBadCodePtr
IsBadStringPtrW
CreateProcessW
GetCompressedFileSizeW
NlsResetProcessLocale
GetDiskFreeSpaceExA
CreateMailslotW
HeapValidate
LocalFileTimeToFileTime
GetCommModemStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE