f6615acae8c781eca18583529f1beb439bc644be6420bfa9d3481235e9ec6fbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6615acae8c781eca18583529f1beb439bc644be6420bfa9d3481235e9ec6fbb
Size

75KB
MD5

0c64d3feb32298982d98e4924ca80585
SHA1

fd6520d9bf6659ee112230faf61df119e68ce8a7
SHA256

f6615acae8c781eca18583529f1beb439bc644be6420bfa9d3481235e9ec6fbb
SHA512

60144f9e313c8efd8eac39253bd358c6b01773f5af523f338510373c92f2576b8241a19d0781a6f6e1e19d1f64d724530fa0fb838939b254de2f46b44d3e1dff
SSDEEP

1536:Aj8d01HjiifOBqvUlEhHJ5vVTskgMxmjvOpEJBV3L+lfDTw:Aj8d0tiifO+hHJvWMUjOp0Bkw

Score

N/A

Malware Config

Signatures

Files

f6615acae8c781eca18583529f1beb439bc644be6420bfa9d3481235e9ec6fbb
.exe windows x86

8d1f3607f6f644aa45436b6badedcfb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualAllocEx
VirtualFree
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE