e6dc8ba41d7987221102354ddc6cd589f71247faf628bbb758d39096fffccc5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6dc8ba41d7987221102354ddc6cd589f71247faf628bbb758d39096fffccc5c
Size

56KB
MD5

81deb0bcbc22bd483e624a59ec9f48bc
SHA1

1b506dbed620a08e6e446c358bc72df4513a86f3
SHA256

e6dc8ba41d7987221102354ddc6cd589f71247faf628bbb758d39096fffccc5c
SHA512

52a8876aed637fa3e8b684004d218d3dd74a0ab240a299e98b6e4cd9d8949ba0ef4054aa10c544d2b5370de665581e67ea0520fa7f87f430b902eb1a1f21827a
SSDEEP

768:4vGSUG4EgCNxMiLVZ+QxIkd9Id5gR/Kao56CiKccxr3rEjWmqpYsP9sgs2ljewqO:wfYgRi6CTzrEjWm3cayKxuIW

Score

N/A

Malware Config

Signatures

Files

e6dc8ba41d7987221102354ddc6cd589f71247faf628bbb758d39096fffccc5c
.exe windows x86

c4932d0a9f9b5bec6533fb68cfd47c5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileScatter
BasepCheckWinSaferRestrictions
AllocateUserPhysicalPages
GetCommandLineA
FreeEnvironmentStringsW
CreateThread
MoveFileW
GetConsoleCommandHistoryLengthW
GetFileInformationByHandle
GetVersionExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE