d6293a124502a8d8348a1cec37fa77fb165877b34522f218625db1e0b580579e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6293a124502a8d8348a1cec37fa77fb165877b34522f218625db1e0b580579e
Size

75KB
MD5

297c3815dc5dd579944f4184d2ec258c
SHA1

d8c62feeae2ee10d7f6d4926ee15c7febbc7d731
SHA256

d6293a124502a8d8348a1cec37fa77fb165877b34522f218625db1e0b580579e
SHA512

e2a6c48872d05cef634f1a67340f27ee0a781b846166c87f9d9f7631b9ba4815a3f7fe4e5cb6debf9c1a381680543dceb120ddd8580e419150c875dafd34e0ab
SSDEEP

1536:aj8d0cHjiifOBqvUlEhHJWuEUXJBV3L+lfDTw:aj8d0miifO+hHJ5E2Bkw

Score

N/A

Malware Config

Signatures

Files

d6293a124502a8d8348a1cec37fa77fb165877b34522f218625db1e0b580579e
.exe windows x86

8d1f3607f6f644aa45436b6badedcfb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualAllocEx
VirtualFree
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE