d6e063b7305a9ffd9c772a709410355310c13fc49428fc9e31b7caaee053a644 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6e063b7305a9ffd9c772a709410355310c13fc49428fc9e31b7caaee053a644
Size

56KB
MD5

f4a3963368af41c99b860e982cf5b738
SHA1

03a30fab7dbcb4c567d4243d864761b4d07a9ff6
SHA256

d6e063b7305a9ffd9c772a709410355310c13fc49428fc9e31b7caaee053a644
SHA512

58b569cd55c61e696e0284237f03f60a5012a3bedd30b395f062223fa374b91ffd32823e324e4d1143295b9346bc3ab2e8c3e667fb996c4648bfbeb4564e75e5
SSDEEP

1536:oDesOv2OG752iGdaxzqEag8MjziPUpLytif:nxI4axzgg82zkUmq

Score

N/A

Malware Config

Signatures

Files

d6e063b7305a9ffd9c772a709410355310c13fc49428fc9e31b7caaee053a644
.exe windows x86

483962464bfb6aa2181ff6104d1e6216

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RequestDeviceWakeup
GetWriteWatch
GetEnvironmentStringsW
GetWriteWatch
VerLanguageNameA
GetModuleHandleW
SearchPathW
SetConsoleCP
LoadLibraryA
GetPrivateProfileStringA
VirtualProtectEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE