6ea0bfc5b6364ac7c31ae2d6198aca0881ab9b5a6f915d458f5482913b81232b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ea0bfc5b6364ac7c31ae2d6198aca0881ab9b5a6f915d458f5482913b81232b
Size

64KB
MD5

568457cd841d6f01b3394e24f22c5008
SHA1

fd2eca417d50c66b8ee5cbf2472769a37f5415c0
SHA256

6ea0bfc5b6364ac7c31ae2d6198aca0881ab9b5a6f915d458f5482913b81232b
SHA512

690114fb6e82b63f609476c5d4927f96b638250c94f9c7b8b75ad25dc710ff67871b1e74353e7d9f8a0fec73a1f1352302df774015b1bb9d594a2d1c7f0b257c
SSDEEP

768:AV4kZbZvZjwvuHOswFjbYSv9eF8HSLp7K3jUevXgeUVXeUX01hvO4yKPYVEZO6:JkZhp1R5Sv968U5Revk4hxwV

Score

N/A

Malware Config

Signatures

Files

6ea0bfc5b6364ac7c31ae2d6198aca0881ab9b5a6f915d458f5482913b81232b
.exe windows x86

86c397493c992478c3d12ff917bcc7be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetFullPathNameW
CopyFileA
SetEnvironmentVariableA
GetCurrentDirectoryW
FindClose
WriteConsoleA
GetFullPathNameW
GetVolumePathNameW
FindClose
SetVolumeLabelA
GetModuleHandleW
CreateSemaphoreA
GetStringTypeA
VirtualFree
CreateFileA
CreateFileMappingA
FindClose
HeapCreate
CreatePipe
CreateMailslotA
GetModuleHandleA
CreateEventA

mshtml

DllGetClassObject
DllCanUnloadNow
PrintHTML
ShowModalDialog

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ