6c7d1434671c60492bcb59289c84e68ff033f08f677e6231134fc822550a4c95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c7d1434671c60492bcb59289c84e68ff033f08f677e6231134fc822550a4c95
Size

94KB
MD5

184d562b6f3e1e6df35597da6ceb7536
SHA1

9fa0385ae7039a167d042bcade5da56696286cd8
SHA256

6c7d1434671c60492bcb59289c84e68ff033f08f677e6231134fc822550a4c95
SHA512

c7eb74aa1074a6cc50d2d9ab8c8d1fa2b941004ffd642925b4ad9bc3fe066fb510551ac40847d83cb1a35d8a0f45940fbed37fa22dbfa382ee65827a3ad60465
SSDEEP

1536:VynwJWUFS4ckSG8GL10JivzRkeRG3uRF4MSpxdc8YaEJwZK4/83ZoMOALF6SSf:4IFS47SE00zRkx+PSVhZEXtpxLF6H

Score

N/A

Malware Config

Signatures

Files

6c7d1434671c60492bcb59289c84e68ff033f08f677e6231134fc822550a4c95
.exe windows x86

53ad0f01a07563c1b98a4c0bebb31a7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatW
GetModuleFileNameA
ShowConsoleCursor
Heap32Next
BackupSeek
CreateFileW
LCMapStringA
FreeUserPhysicalPages
CreateEventW
ReadConsoleOutputA
GlobalMemoryStatus
GlobalFindAtomA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE