606a26b503acb30ee3ec471c555d2d01209f2e90b2c480718fef9135c898b8e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

606a26b503acb30ee3ec471c555d2d01209f2e90b2c480718fef9135c898b8e8
Size

56KB
MD5

84957e7b2f043137614d79fb0a78b5a0
SHA1

7aa7e62fafe265b858e24c578f83b1b27a130ab8
SHA256

606a26b503acb30ee3ec471c555d2d01209f2e90b2c480718fef9135c898b8e8
SHA512

ba048f737b82364d6756145d9bfc77e8f0c99c56a15f0fee082368832736827ea94ca1ecbdc90879db46eb56f494d04ccfce69963f2a69232952c54d2d91dc16
SSDEEP

1536:xrDgLtge89YPYpGhibNmntqAOsYxnTNNx+:x/sZ89YPjKN8tqAGTQ

Score

N/A

Malware Config

Signatures

Files

606a26b503acb30ee3ec471c555d2d01209f2e90b2c480718fef9135c898b8e8
.exe windows x86

28fea92c5b1c34bde99e9deda1bc3b87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalA
UTRegister
SetComputerNameExW
FoldStringW
OpenJobObjectA
SetFileApisToOEM
Sleep
VDMConsoleOperation
CancelWaitableTimer
FreeUserPhysicalPages
InterlockedExchangeAdd

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE