6f8f40cce54e13213103ce53d1971939d82c8e6b264b2e8470b4a1b5cb8414a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f8f40cce54e13213103ce53d1971939d82c8e6b264b2e8470b4a1b5cb8414a5
Size

119KB
MD5

e3f291f33c1b322919f085f8eb092307
SHA1

18433e3875bfc7d86512c5e341d6a3441ac9fbe2
SHA256

6f8f40cce54e13213103ce53d1971939d82c8e6b264b2e8470b4a1b5cb8414a5
SHA512

92f2d09e3cf40d8476c42ca45b46a142a1d7222f1f17a3289b8691f563204a7ca05b9b2b4c9657633efb8044c0d09b1423fd1b5de56043093edaca8417018978
SSDEEP

3072:/ujgyV2EwIb6lDPVPcWjbVBAGLHs2qxnC:/uF2EwIb6L1dBAA

Score

N/A

Malware Config

Signatures

Files

6f8f40cce54e13213103ce53d1971939d82c8e6b264b2e8470b4a1b5cb8414a5
.exe windows x86

58682caffdd3bd0e9472d680ba824e13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeW
ReadFileEx
CreateMailslotA
UnregisterConsoleIME
CreateProcessInternalWSecure
GlobalLock
_lopen
PeekNamedPipe
GetConsoleCommandHistoryLengthA
LocalSize
FlushViewOfFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE