b6da4c1f8fb682f56edff991e43819678b2923fbc767a39ebf6a856a6dfeb286 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6da4c1f8fb682f56edff991e43819678b2923fbc767a39ebf6a856a6dfeb286
Size

91KB
MD5

5079b9779b4e3514127a2745c246267a
SHA1

8dec38941cea3ac7e8cbbefc4f6cfa908b243413
SHA256

b6da4c1f8fb682f56edff991e43819678b2923fbc767a39ebf6a856a6dfeb286
SHA512

31c2bedd86c7311295b2e39414ffe466bc08b9fdae327bab781a89a0e4341fae85945e880b752015caa1c565d680edcd3e4ee1d997928bb0425d08198e1b9075
SSDEEP

1536:MbC2XX38LkHEuanPuq/NaEI7O2Xt3ZyPb73v9XgOpiGqqi3Owwh:MbLXX3j6Pu9hlXXyjbv9XgO4U

Score

N/A

Malware Config

Signatures

Files

b6da4c1f8fb682f56edff991e43819678b2923fbc767a39ebf6a856a6dfeb286
.exe windows x86

bc1ac0630eedc966543f8e559022e5ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWowExec
ExitThread
ConvertFiberToThread
GlobalGetAtomNameA
BaseQueryModuleData
DeleteTimerQueueEx
RegisterConsoleVDM
CreateFileA
WriteFileEx
GetConsoleHardwareState
BuildCommDCBAndTimeoutsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE