6079226cd8db809d1ffc15cb73332f2edf035a2610be534663e9974e59c8d390 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6079226cd8db809d1ffc15cb73332f2edf035a2610be534663e9974e59c8d390
Size

107KB
MD5

90fcbb356763e6eaea34acf812fd6da0
SHA1

8a0f8fbc734bbf02eb9670cfc633bd3fc8442be3
SHA256

6079226cd8db809d1ffc15cb73332f2edf035a2610be534663e9974e59c8d390
SHA512

82dc55a1f80edad8f124437feec347a79bf14f34b449ad0e708858980a161b65017ecb177bf62021c7b7049e52f2e39ca6cdc9e167033da81a4ed214dcdf5150
SSDEEP

3072:h5dSEtNZuabvvMT6FPukxsiyHs2quGf9:h53Vzvvciukxsia

Score

N/A

Malware Config

Signatures

Files

6079226cd8db809d1ffc15cb73332f2edf035a2610be534663e9974e59c8d390
.exe windows x86

291f0e561d8fee3b5b5b709ddc68c0ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelDeviceWakeupRequest
GetProcAddress
MapUserPhysicalPagesScatter
UnregisterWait
RequestDeviceWakeup
SetCPGlobal
GetStartupInfoA
GetFileAttributesA
HeapLock
GetSystemPowerStatus
FindNextVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 51KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE