8e6ecf6a004a2643b566c700dcf8364fe1c50b2571b2403cb1d2748f77aba33f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e6ecf6a004a2643b566c700dcf8364fe1c50b2571b2403cb1d2748f77aba33f
Size

320KB
MD5

22615d579dfc05affca6f1e1302dbae0
SHA1

2f9c6c325dee7a403cd5740cadc78f4e3f02258c
SHA256

8e6ecf6a004a2643b566c700dcf8364fe1c50b2571b2403cb1d2748f77aba33f
SHA512

b10e9dc7518c96cae4fe97196546cefdea38544a1cce7e2464860089c6e58e92b244b2eefddf7e4eb2042456508fafc0b1d46183836885582eb944b62b0cbdb3
SSDEEP

6144:tWsJm4H+oT6H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:tWsAp2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

8e6ecf6a004a2643b566c700dcf8364fe1c50b2571b2403cb1d2748f77aba33f
.exe windows x86

0057042437b09b5ad79347bb3d618025

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PeekConsoleInputA
CreateMutexW
GetConsoleInputExeNameA
FileTimeToDosDateTime
GetUserDefaultLangID
MoveFileW
VirtualProtectEx
GetNumberOfConsoleInputEvents
ZombifyActCtx
InterlockedPopEntrySList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE