b661963d9155c96111603b94307b16d651c1b7b70a0efc19ea340bad4c5b054f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b661963d9155c96111603b94307b16d651c1b7b70a0efc19ea340bad4c5b054f
Size

222KB
MD5

396b6cb308b5c5b0f3e50082967585f9
SHA1

f818ffb8ef5eb45aae582e2a2e2fe71d0ae0210d
SHA256

b661963d9155c96111603b94307b16d651c1b7b70a0efc19ea340bad4c5b054f
SHA512

5e206a4e239f25350b6552b68f0a9537ce787593ef3dab3a5b93f4a315710cb8ecb8433c5be0b3e6e2b34f8e9f1ca46dfb111337f1cf8b40aaccec221ed52a50
SSDEEP

6144:AGJjV3P7CSj+6wZBHmkESt1UMr8ylg1VLy:XX3A6udrES4Mr2y

Score

N/A

Malware Config

Signatures

Files

b661963d9155c96111603b94307b16d651c1b7b70a0efc19ea340bad4c5b054f
.exe windows x86

b3b84238de271facd907ccf595edf4da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
WriteFile
ReadFile
SetFilePointer
CloseHandle
GetModuleFileNameA
GetCommandLineA
CreateFileA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 347B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ