b62b60048c98e71e5f4ba51e4c43cb60ba1e8d2eec7379bf46b72c139d86feff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b62b60048c98e71e5f4ba51e4c43cb60ba1e8d2eec7379bf46b72c139d86feff
Size

75KB
MD5

d8fed6cabf338cf76c17b6a3bcf4db0b
SHA1

c109f1562eef695a97891ead76e70f704f5daad1
SHA256

b62b60048c98e71e5f4ba51e4c43cb60ba1e8d2eec7379bf46b72c139d86feff
SHA512

6a361368612775f608fa71938362ea375854c6f397eec3e7c6bb00970fc3fa95186842b6af0e6c24d5dbd25cfc694d1e1fffffe0d406fb36898367c561108dd8
SSDEEP

1536:una/h7knY5FSxtCK1wz7hng5QndMXwbSv3eg+6W/dxYdC/cwAetrL/ctbIUZ:uaEyDzZ3yXCgK/RxrL/23

Score

N/A

Malware Config

Signatures

Files

b62b60048c98e71e5f4ba51e4c43cb60ba1e8d2eec7379bf46b72c139d86feff
.exe windows x86

32aa2763180a774d489e10996d8f150a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWindowsDirectoryA
WriteFile
PrivCopyFileExW
GetNextVDMCommand
GetLogicalDriveStringsW
MapUserPhysicalPagesScatter
WriteFile
ChangeTimerQueueTimer
OutputDebugStringW
UnregisterWaitEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE