6c64d03bb3340cf1e24b87b48b198063aa1031e40d3576722f206e08dbe81729 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c64d03bb3340cf1e24b87b48b198063aa1031e40d3576722f206e08dbe81729
Size

86KB
MD5

19b615b7ce270f023f517cb2d614b2d2
SHA1

9ac4143de2908803856cab82131bac7536c78309
SHA256

6c64d03bb3340cf1e24b87b48b198063aa1031e40d3576722f206e08dbe81729
SHA512

8cb4a16d83ba5d355486519a4ce928774dbc842bc43e22de15bb3b2292ebfcdff3eaac66eb05b99960cedf87f24806820462d0752c8ccb3af478103656dc4982
SSDEEP

1536:vfDLmnzDjHbWfL+BvYxQT520Nl1p6CDVbagMygi+jojztGBx2fTYU0t0l5snR+7H:vfEzDzyLOtT5/Fp6mVbxA4UBYx0t+SsT

Score

N/A

Malware Config

Signatures

Files

6c64d03bb3340cf1e24b87b48b198063aa1031e40d3576722f206e08dbe81729
.exe windows x86

d5cfcf135700978b41674ad55201d6a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
GetConsoleAliasesLengthA
IsProcessInJob
GetConsoleInputExeNameW
FindAtomW
SetComputerNameA
CancelWaitableTimer
CommConfigDialogA
SetComputerNameW
TerminateJobObject
GetConsoleAliasesLengthA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ice
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE