6a65a02b871d9ab1a3e0112c73d16ad2e818f7b949f5e4b34d8410d6f19b7c91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a65a02b871d9ab1a3e0112c73d16ad2e818f7b949f5e4b34d8410d6f19b7c91
Size

517KB
MD5

de595c1d038dbc919f6addeeb4cf73e4
SHA1

392751ef928168276361be46acdd616bbbb9e751
SHA256

6a65a02b871d9ab1a3e0112c73d16ad2e818f7b949f5e4b34d8410d6f19b7c91
SHA512

c3d86a3279a4ccb6f75e5776efac0106c3a780d1e5b199cccdc80963d66e4f58d2f8c8c37e91a8fbdde9ab2aad03e6b65e9ccec215734479baed6cdae50db67b
SSDEEP

12288:z2MadZY1uVz5QLV1XiPsw06iEE6uWbj0C4zmMpay:iMaQsReuu6RE63b2N0y

Score

N/A

Malware Config

Signatures

Files

6a65a02b871d9ab1a3e0112c73d16ad2e818f7b949f5e4b34d8410d6f19b7c91
.exe windows x86

70d566d7fb4a9a58f8d1f6f4b083b372

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetTimeFormatA
GetPrivateProfileIntW
CreateMailslotA
GetVolumePathNameW
GetStringTypeA
lstrcatW
HeapCreate
CreateMutexA
CreateEventA
SetCurrentDirectoryW
CompareStringA
CopyFileA
GetModuleHandleA
InterlockedDecrement
GetLogicalDrives
InterlockedIncrement
GetCurrentProcessId

cryptui

WizardFree
CryptUIWizImport
CryptUIWizExport
CryptUIWizDigitalSign

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JDATA
Size: 501KB - Virtual size: 788KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ