6b95e10011826f64e9a4cf66f09bb4acdd1426b6469801e89b400677d56b104d

General

Target

6b95e10011826f64e9a4cf66f09bb4acdd1426b6469801e89b400677d56b104d
Size

52KB
MD5

815c46ef8080240e6a796a923e357810
SHA1

b49bd3b02e44bda398639ded4aba2c8b3e927255
SHA256

6b95e10011826f64e9a4cf66f09bb4acdd1426b6469801e89b400677d56b104d
SHA512

d0ba3cd4b50587cfafbebc086dddcc1fde9a115218579dcf8f2326a2cb0db7aa4ffeda0d583c8d2a7a7048ebeec474c7b8efea3089ae8191e24f5639a4bc73df
SSDEEP

768:yOjXfQmOO3A+hYmKJ1IXevwR0Oe3oFm3ADVe6T:zX4MODjIyLdoFm3ADF

Score

N/A

Malware Config

Signatures

Files

6b95e10011826f64e9a4cf66f09bb4acdd1426b6469801e89b400677d56b104d
.exe windows x86

ecc463dc139340a7bfb4495a34251273

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
ConnectNamedPipe
Sleep
DisconnectNamedPipe
WriteFile
LocalFree
LocalAlloc
CreateNamedPipeA
GetLastError
GetStdHandle
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
CloseHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
SetFilePointer
SetStdHandle

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ecc463dc139340a7bfb4495a34251273

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 12KB - Virtual size: 38KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 12KB - Virtual size: 38KB