6130daa79cdc5149f059fbed8807a16b631d4ab49bf5e0fabe254eadd83fa231 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6130daa79cdc5149f059fbed8807a16b631d4ab49bf5e0fabe254eadd83fa231
Size

66KB
MD5

ba4ccbec2c36aa45f72c12e20a33e648
SHA1

88f4b46eeba03392b2fa4d38353fa2c55caefa91
SHA256

6130daa79cdc5149f059fbed8807a16b631d4ab49bf5e0fabe254eadd83fa231
SHA512

b9365474a12554896ea6a8904017fdcd9e3eb8d5e7686af3ad8c082a4afd55575f33752cc9ffbbe732f8de909c455c90b8aff5c693c53d409d7a45e4994a4e30
SSDEEP

1536:i4nhAoqJ5uvMSDsNyhYDFWohxD/EBKgUWF0WGorVsQNXY8:i4n6MESoACwArEYgUWFEQ/X1

Score

N/A

Malware Config

Signatures

Files

6130daa79cdc5149f059fbed8807a16b631d4ab49bf5e0fabe254eadd83fa231
.exe windows x86

023db9afa8ac90096a205170d10f4fca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenJobObjectA
lstrcmpA
WriteFile
HeapCompact
GlobalAddAtomA
_llseek
Module32First
SystemTimeToTzSpecificLocalTime
GetThreadContext
DosPathToSessionPathA
Process32NextW
PostQueuedCompletionStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE