f6cbba9dab0a888f67528f3a681115925a27a957ff2987254ba965b238cfb97d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6cbba9dab0a888f67528f3a681115925a27a957ff2987254ba965b238cfb97d
Size

320KB
MD5

30698fda2ccaaf7caee7fd9192f57470
SHA1

48fb8ac01461c726d3814db8f8969a5a4ca70c89
SHA256

f6cbba9dab0a888f67528f3a681115925a27a957ff2987254ba965b238cfb97d
SHA512

1c0798fbeac5e1ebe35d2301e8dc663d877cdbebf76150259c89380c6afcc5b5b55431f2c4bc4f9bd8097755efca401943b6fda3d29134738ded4e552a25a1dd
SSDEEP

6144:nmU3MFGoOH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:nv8Qo02EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

f6cbba9dab0a888f67528f3a681115925a27a957ff2987254ba965b238cfb97d
.exe windows x86

e535556b68d42b2ff8ce586e1b01b323

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionW
MoveFileWithProgressA
BaseCleanupAppcompatCacheSupport
EnumUILanguagesA
IsDebuggerPresent
EnumSystemLanguageGroupsW
RegisterWaitForSingleObject
DebugBreak
GetVersion
GetConsoleFontSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE