6a695cdf2e3a3818dabe57c40a1ff09c528f9a20815a67ba99c7679f85d31829 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a695cdf2e3a3818dabe57c40a1ff09c528f9a20815a67ba99c7679f85d31829
Size

320KB
MD5

a1088688eb2094ea0649da1124e16620
SHA1

3340752ffc2674786b31f55ae3e3e7039969afff
SHA256

6a695cdf2e3a3818dabe57c40a1ff09c528f9a20815a67ba99c7679f85d31829
SHA512

b2f4a1425e2d9aed1a75fd7fadeabfbca0710e817d4e077c35b1c57b3265cf2f0fecf4fdedff82322bee879526b38cbdc91f53d69dddeea055cdc61ca63430d9
SSDEEP

6144:wqiELA/N8H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:7lb2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

6a695cdf2e3a3818dabe57c40a1ff09c528f9a20815a67ba99c7679f85d31829
.exe windows x86

b782d98a57d484cec8176dd90e816793

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
SetCurrentDirectoryA
BackupSeek
GetLogicalDrives
_hwrite
MapViewOfFile
GetProcessAffinityMask
IsWow64Process
CallNamedPipeA
ConnectNamedPipe
_lclose
CreateMutexA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE