b6a78928095e70501e6a027fca304fcc17f2c4bb70a0596b4ae077f0a1b06303 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6a78928095e70501e6a027fca304fcc17f2c4bb70a0596b4ae077f0a1b06303
Size

981KB
MD5

92c545a8b6c7de875e1a72f7664adfa0
SHA1

287883ee87f21dc60b9f2103d746cc10fe2643c5
SHA256

b6a78928095e70501e6a027fca304fcc17f2c4bb70a0596b4ae077f0a1b06303
SHA512

e7e8b06adf5b27e2c960b4c0bf0c12111afd9aeead4effddc2305f5637112314b6532ea811797e6d12c1199885eb78903f0baafde9b1ed7eb1a38c7f972b0000
SSDEEP

12288:URYuTaDY2yMbAP79eA/yw1lAHWVJMTZRGyrDgiDO4r2fJvWTk+bVsg89+lo/I6dF:UNeE2D2yuljmOu2ak+byg8nwWh9Eq

Score

N/A

Malware Config

Signatures

Files

b6a78928095e70501e6a027fca304fcc17f2c4bb70a0596b4ae077f0a1b06303
.exe windows x86

068a2a5a9ae0c3d7ccfcd17844e87823

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtOpenIoCompletion
NtShutdownSystem

user32

GetFocus

kernel32

GetSystemDefaultLCID
GetCurrentThread

Sections

.text
Size: 978KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE