6defa9f23d147fd7db3e68598b41cc74a28ca87fe3e8652e5694730383f7e4c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6defa9f23d147fd7db3e68598b41cc74a28ca87fe3e8652e5694730383f7e4c8
Size

28KB
MD5

a338a24219f10729be9a83dd167012d0
SHA1

08f9fea75e5bdf2eb13baf383f4564b7079dcc14
SHA256

6defa9f23d147fd7db3e68598b41cc74a28ca87fe3e8652e5694730383f7e4c8
SHA512

743e8ccf1d970c9aefd61dbd26acf3e0277b3a4c531ea9111af3dd6ae649a0e9ff4d772da336b0f1ce956a3e7f989b2e835d73e5039937bc28cc62cb72179389
SSDEEP

384:ElvXHstNu59QxdUmlH+GyywiejwSoEFlJxu:ge+KdvyJiej/FFlzu

Score

N/A

Malware Config

Signatures

Files

6defa9f23d147fd7db3e68598b41cc74a28ca87fe3e8652e5694730383f7e4c8
.exe windows x86

62712d090c8100403a0e9985db7b671f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
FreeLibrary
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ