d6be49befebd09c11b9c6864316f3ee268c9d4fe6abf181ece871e53d0d3708f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6be49befebd09c11b9c6864316f3ee268c9d4fe6abf181ece871e53d0d3708f
Size

94KB
MD5

f1cd780e73865822af6b03b9e610bf91
SHA1

c754a1f89d1bfdd0c9db68f1757e5e52eb7f6095
SHA256

d6be49befebd09c11b9c6864316f3ee268c9d4fe6abf181ece871e53d0d3708f
SHA512

dee5142738f67a8fee5ad866c66f220a766bc116d4436ac9e46b6632f46017ed6174b94e7a79964b6e6563b7922913f4489a7012b0dce265a963505a2e321b27
SSDEEP

1536:KmOYWe0eSTFloeJ1yXjEuWeDTOPnda6qIc8YaEJwZK4/83ZoMOALF6SSf:x3rRS/oeJ1MEuT606qIhZEXtpxLF6H

Score

N/A

Malware Config

Signatures

Files

d6be49befebd09c11b9c6864316f3ee268c9d4fe6abf181ece871e53d0d3708f
.exe windows x86

f36f38ed2ff85e84d9a45cc67afefa2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
GetCPInfoExW
SetTermsrvAppInstallMode
UnregisterConsoleIME
GetComputerNameExA
Process32NextW
GlobalMemoryStatus
LockFile
PeekNamedPipe
GetSystemTimes
GetFileAttributesExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE