6ca127d619e29699769fc477b854f9a605a5a1aa65852d6c09e25a80c5c633b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ca127d619e29699769fc477b854f9a605a5a1aa65852d6c09e25a80c5c633b6
Size

320KB
MD5

0bc2fee982a13ee95da2aa607858fc90
SHA1

207e376e71d845a1c7486e88e39483dd2d4e3273
SHA256

6ca127d619e29699769fc477b854f9a605a5a1aa65852d6c09e25a80c5c633b6
SHA512

f3c227833d2de59c75306da2d24acd3f0a669839228711d4610596b5a2e2aa47c55ee0cda73f251031188e879cc202d273a408b5c05e74d06b3c5129c195979d
SSDEEP

6144:CY6hZrf7KzArH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:p6hZKzA2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

6ca127d619e29699769fc477b854f9a605a5a1aa65852d6c09e25a80c5c633b6
.exe windows x86

c6c905158adea3708234c1905ff73e03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
LZSeek
SetConsoleWindowInfo
ScrollConsoleScreenBufferA
IsWow64Process
SetComPlusPackageInstallStatus
QueueUserWorkItem
ReadFile
WriteFileGather
SetConsoleTitleA
GetExitCodeProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE