6a3014b06531d01852cb6fc06d2288d8d40133600539c877df780c2fe1187011 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a3014b06531d01852cb6fc06d2288d8d40133600539c877df780c2fe1187011
Size

76KB
MD5

c855f258eb1f195a4086ed2d0a4bd083
SHA1

242d3f63c786e50d300f96c38e9d7ed3eff58d82
SHA256

6a3014b06531d01852cb6fc06d2288d8d40133600539c877df780c2fe1187011
SHA512

37ad8a2ba15d950daa7a33348c0ff107b7ff97f54aa9db97cc28b0cdbd3e9053bfad7c246fbf1b63bab890e17fad73e8f77c896be7c5b92f645e030ab11b0df3
SSDEEP

1536:0iii5U/Z+eDbZ6fx4MuYDAutH7zNRk9QO5os82hW8fPL9:7GZ+MIfx4MJrbzH05J8vYL9

Score

N/A

Malware Config

Signatures

Files

6a3014b06531d01852cb6fc06d2288d8d40133600539c877df780c2fe1187011
.exe windows x86

18df28356e068bc105e071a43bcce2d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugActiveProcess
VirtualFreeEx
ConvertThreadToFiber
HeapSize
WaitNamedPipeW
GetMailslotInfo
PulseEvent
GetCurrentThread
SetThreadPriorityBoost
CreateFiberEx
TrimVirtualBuffer
ReleaseActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE