620e6820f9c9e6c2f832d421302d2e9c863860ade4f50661322ce311f39278ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

620e6820f9c9e6c2f832d421302d2e9c863860ade4f50661322ce311f39278ac
Size

76KB
MD5

06226d54c4ba03d625ed04252d2c626c
SHA1

51377e84bc2e43e6d814599f50e869f64eae8144
SHA256

620e6820f9c9e6c2f832d421302d2e9c863860ade4f50661322ce311f39278ac
SHA512

23a3df0ca2c27b828782a4167c5101e006a206b7338615b751166736f6a820450a2dd78b9f398c056104f6a21d7c7b2685cc48edb5dea76efafc06993c19bd9b
SSDEEP

1536:9ppppCkB9TziPaX9pTZoRpYZljhFqboDQiLGO1oP2HN2RDypjVrs2ryrd1vUQuq6:9ppppCknGPaX9lAjsDQizC6IDyHs2qo

Score

N/A

Malware Config

Signatures

Files

620e6820f9c9e6c2f832d421302d2e9c863860ade4f50661322ce311f39278ac
.exe windows x86

d49b7dbdfa17bb1f24d9a00dfcee4a50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalWSecure
SetTapePosition
FoldStringA
OpenProfileUserMapping
ReadConsoleInputA
ScrollConsoleScreenBufferA
BaseFlushAppcompatCache
LoadResource
FindFirstVolumeW
ExtendVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE