6f97ded242a81ce9d197546102fef0b12ec750fd934069bc4d2daa3ffdc773bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f97ded242a81ce9d197546102fef0b12ec750fd934069bc4d2daa3ffdc773bf
Size

823KB
MD5

0f13812558193f4147f25cb175f9e371
SHA1

85c74a3068b974b37cdb573293c67bee9ccd8616
SHA256

6f97ded242a81ce9d197546102fef0b12ec750fd934069bc4d2daa3ffdc773bf
SHA512

afbe56ba78723633d0c11562ddb8da98aeea3110eb4491da095cf92f0f18a315e5b1e6fa3d4f4d318fcefe49d3166077b2111944e4518d2bb3b8211b28c7ce77
SSDEEP

12288:1olKvFyneJ8jV+dhkWdCTgLqjC7YOaotguoWn+kM+Thl98/fCX:1osACeYqpcGjCvy+Thlq/aX

Score

N/A

Malware Config

Signatures

Files

6f97ded242a81ce9d197546102fef0b12ec750fd934069bc4d2daa3ffdc773bf
.exe windows x86

5ed55e5e963877ec5a291dcc45ef2c39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
CreateSemaphoreW
GetShortPathNameA
GetTimeFormatW
GetStringTypeA
HeapCreate
GetEnvironmentVariableW
GetVolumeInformationA
HeapFree
GetDiskFreeSpaceW
WriteConsoleA
GetCurrentDirectoryW
CompareStringW
OpenEventA
GetModuleHandleA
lstrcatA
lstrlenA
SetLastError
GetPrivateProfileIntW

iedkcs32

Clear
CloseRASConnections
BrandICW
BrandIntra

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ