6f06b03430b03416bc8d57f7dcedeea93fa3e78c0950343ec3d04ae7f6019928 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f06b03430b03416bc8d57f7dcedeea93fa3e78c0950343ec3d04ae7f6019928
Size

122KB
MD5

823ce02fd05fb770ba9674c72e18aa84
SHA1

5ef4256dd2b9755793a964100610f9299ffb15be
SHA256

6f06b03430b03416bc8d57f7dcedeea93fa3e78c0950343ec3d04ae7f6019928
SHA512

588f4c5d8efdefa6543deef575662f57ac65dd6256eb1a07880a20f6d3a92066316c0c7c062b993a4d03341f4a1ae790c5b8c70027b7fd4ad2d51a8c610ea06c
SSDEEP

3072:b6YX1lYlQ/Wiiy+QzoBwSdtT4SCKMp6nTRFVQ:ulQ/WI0BDd14SCKMw1

Score

N/A

Malware Config

Signatures

Files

6f06b03430b03416bc8d57f7dcedeea93fa3e78c0950343ec3d04ae7f6019928
.exe windows x86

a91447a9d8ba55d9dcba3e84505f9a1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetStringTypeExA
GetProcAddress
GetSystemTime
GetModuleHandleW
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
GlobalHandle
GetTempFileNameA
GetCommandLineW
GetTempPathA
GetUserDefaultLCID
SetStdHandle
GetStringTypeA
GetProcessHeap
SetFileAttributesA
VirtualProtectEx
DuplicateHandle
lstrcpynA
FreeEnvironmentStringsA

msvcrt

__p___initenv
__setusermatherr
free
_except_handler3
calloc
__p__commode
__getmainargs
_exit
_XcptFilter
_initterm
__p__fmode
_controlfp
__set_app_type
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ