6fed8afcc8ec8948797ec0523a620760d9cb1893f62f20840b772caffd49641a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fed8afcc8ec8948797ec0523a620760d9cb1893f62f20840b772caffd49641a
Size

217KB
MD5

11e66c6628ef6c917296d9cd15ca6d95
SHA1

09be3a046b8cc80d804ae3b513e0a3f4a91125fb
SHA256

6fed8afcc8ec8948797ec0523a620760d9cb1893f62f20840b772caffd49641a
SHA512

ffea072957937262916a3bd6cccd7796775eda697b1078c4ee117314c08bac60001bbe9ffda3cffde71fa758a2776f5073dcd8b4286cd1a779a3497e9b1aa50c
SSDEEP

3072:FH/U/oXBcT7JkjkstZ1uy/Z17mko9C9XO8X4wxXVmikIwK6bL6ZYt9CjE1LO:FHjxcx8J5uybal9Ckkm9IQHt+Ec

Score

N/A

Malware Config

Signatures

Files

6fed8afcc8ec8948797ec0523a620760d9cb1893f62f20840b772caffd49641a
.exe windows x86

f6ed355c74b43241697530a7c30a07bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
CloseHandle
ExitProcess
LCMapStringA
CreateFileA

user32

CreateWindowExA
CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegEnumKeyA

Sections

.text
Size: 4KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ