b6412be83dc8bea232b2ec690e8ebff6ca02cea532becd77788c0a8ad1d84fa3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6412be83dc8bea232b2ec690e8ebff6ca02cea532becd77788c0a8ad1d84fa3
Size

75KB
MD5

ddcd16af965cbd149aa5d17d78c69ea2
SHA1

9d2ea56367e7d72d235dcd379c0c191661da55e5
SHA256

b6412be83dc8bea232b2ec690e8ebff6ca02cea532becd77788c0a8ad1d84fa3
SHA512

ed0127689dd61a14975feb07fba6d0ca1f762f7ae48dc225fed2bb1241737e39af9f9c640652da26011687ab21300f8556009fa78dbc586ac13243061e577bd4
SSDEEP

1536:/j8d0MHjiifOBqvUlEhHJhvVTskgMxmjvOpEJBV3L+lfDTw:/j8d02iifO+hHJXWMUjOp0Bkw

Score

N/A

Malware Config

Signatures

Files

b6412be83dc8bea232b2ec690e8ebff6ca02cea532becd77788c0a8ad1d84fa3
.exe windows x86

8d1f3607f6f644aa45436b6badedcfb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualAllocEx
VirtualFree
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE