f6d5c661dac8d0a3f82e832571e62178437772726f884abf3b5125ff2bf1686e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6d5c661dac8d0a3f82e832571e62178437772726f884abf3b5125ff2bf1686e
Size

119KB
MD5

afb4fe6c3135c73bf44418bf85d5e1d9
SHA1

df2e280f10b03c667653c6155f3c171d61ebe632
SHA256

f6d5c661dac8d0a3f82e832571e62178437772726f884abf3b5125ff2bf1686e
SHA512

5c91a0b29e9700a40364a19bfa9d05a658955ded6c7367f47cf6b340e96ae5708a2eec09329ff6b4810ce84c2e7dafadb91aeb25642c7783137ec8f4f3383560
SSDEEP

1536:z6+rxmt5ScT/oHCqdHim8tFiw7N6pP6lW3Rnch8kVVSmbmBcypjVrs2ryrd1vUQa:zvrIv/fOHbrcW3kVV/yBfHs2qxnC

Score

N/A

Malware Config

Signatures

Files

f6d5c661dac8d0a3f82e832571e62178437772726f884abf3b5125ff2bf1686e
.exe windows x86

18fdbfc72886af3e82b8b8c508804154

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
ClearCommBreak
FormatMessageA
GetNumaNodeProcessorMask
IsValidCodePage
GetNumaAvailableMemoryNode
GetExpandedNameA
GetStringTypeExW
ReleaseMutex
CopyLZFile
IsProcessInJob

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE