6408696f8bfac86724c4b650a01d90ea4691db952b6fb2212fd7f305e6ddbe8c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6408696f8bfac86724c4b650a01d90ea4691db952b6fb2212fd7f305e6ddbe8c
Size

80KB
MD5

0ada75e2385e8a6d06593e6403e0456e
SHA1

a3fc166c3428ac53deb19dbc3176cf61f621bd4c
SHA256

6408696f8bfac86724c4b650a01d90ea4691db952b6fb2212fd7f305e6ddbe8c
SHA512

4b1aa33f1fea5af164db4e335412be8af96df73722e9faae12e5232029b886f359392e742d6b41f79fc7043ffcea11e48834606341048a9b36103d9491749f7d
SSDEEP

1536:+2c/i1khoQaAuVwfndOOQpxnEL+AMBLp82hW8fPL:5Si1kho1wvMOQnZRt8vYL

Score

N/A

Malware Config

Signatures

Files

6408696f8bfac86724c4b650a01d90ea4691db952b6fb2212fd7f305e6ddbe8c
.exe windows x86

e5793e925f350ae01ae9d34ac4d7322f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceW
lstrcpyW
GetConsoleScreenBufferInfo
GlobalUnWire
TerminateThread
SuspendThread
VerLanguageNameA
FindNextVolumeA
IsDebuggerPresent
CreateDirectoryW
ConnectNamedPipe

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE