d6a058c2097db177e5b3b1f324b6dc82a92729d94f05a0037eee91189768e0f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6a058c2097db177e5b3b1f324b6dc82a92729d94f05a0037eee91189768e0f1
Size

292KB
MD5

0c48edc0cb0fc2dfedbd3d5bbdd6f9f1
SHA1

e0e264f2c54db773b840b3df9da455600a317cc8
SHA256

d6a058c2097db177e5b3b1f324b6dc82a92729d94f05a0037eee91189768e0f1
SHA512

f28b4f99a06d26213cf7cf8a60312c17a1126f67f142cb6c827407c3612169dff78d915a7988e83d8114b28a18248d3d4db69366616c62fcd5bf70159021f7ae
SSDEEP

6144:arzSlGlHYdx65eJjdunzHfy/au3oL5E3Z1ugm9b332Yq:arzZlH6x65eJ0fy/au3oV1x3329

Score

N/A

Malware Config

Signatures

Files

d6a058c2097db177e5b3b1f324b6dc82a92729d94f05a0037eee91189768e0f1
.exe windows x86

d8b07fa4977c4c93f17c89e28f443530

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetStartupInfoW
TlsGetValue
GlobalReAlloc
lstrcatA
GetAtomNameW
GetDateFormatW
CreateProcessW
VirtualProtectEx
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.megrsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ