6679d829ff8e337de0ead9b6154580cb88e7f54e45a2bf9c1030139c5f6c428d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6679d829ff8e337de0ead9b6154580cb88e7f54e45a2bf9c1030139c5f6c428d
Size

144KB
MD5

92d29dac1589f8408939f07202ac2cfc
SHA1

2180e715de45041661c371856270005f3ea6adf3
SHA256

6679d829ff8e337de0ead9b6154580cb88e7f54e45a2bf9c1030139c5f6c428d
SHA512

0801e42c216d8d6b9610c3d0b255aecec710a9cd57a537404852e86ed33b0be96e0d90d51b86324c7bd066e65eaabe541018915e68764ec0ebb8a69146c5951c
SSDEEP

3072:aY2ubINluFJtzRsXQ3Hs2qmRlixXaKa0qMW2pVol3IFEyKwLR:a4bINluFJtjX/wguJpVopIh

Score

N/A

Malware Config

Signatures

Files

6679d829ff8e337de0ead9b6154580cb88e7f54e45a2bf9c1030139c5f6c428d
.exe windows x86

5b587721a58148050a79a20adb0aa75a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessWorkingSetSize
CopyFileA
GetGeoInfoA
SetProcessShutdownParameters
SetFileTime
GetConsoleCommandHistoryLengthA
GetProcessId
FindNextVolumeW
GetCurrentProcess
CreateDirectoryA
CompareFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE