02b6e8d19c527c2cfea67bf27bcfc368ce1ec616c47f9e6bf7064706655842de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02b6e8d19c527c2cfea67bf27bcfc368ce1ec616c47f9e6bf7064706655842de
Size

320KB
MD5

a22a26ac46afe52955ab4df95dfd6400
SHA1

0af975afcded5feb61c3f8d4a7c82bc773168e2e
SHA256

02b6e8d19c527c2cfea67bf27bcfc368ce1ec616c47f9e6bf7064706655842de
SHA512

c6c0b18b18e4939784e6169b3d1665c103921f7f4f05fe0dbea8c70e67b25b72a782f2c42173258494287d57a89acffcb5b375701b0783f3fcdfb1b232902a42
SSDEEP

6144:sKsXH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:hs32EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

02b6e8d19c527c2cfea67bf27bcfc368ce1ec616c47f9e6bf7064706655842de
.exe windows x86

4bf7de4e5f4f288790e1f4a17dc1c13b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
UnregisterWaitEx
GetNumberOfConsoleInputEvents
FindVolumeMountPointClose
MapUserPhysicalPagesScatter
UTRegister
FindActCtxSectionStringW
GetCurrentProcessId
SetConsoleNlsMode
SetUserGeoID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE