6253795ea4efbb492f18b2b229a1c44f1f5a6a706b4866bf385aa9733897578f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6253795ea4efbb492f18b2b229a1c44f1f5a6a706b4866bf385aa9733897578f
Size

199KB
MD5

424e0e5bb5bdf9cf7a8a4e48cb76d506
SHA1

3be3c3ce097d6a37cb3186f3a8edbbcdbb0d578d
SHA256

6253795ea4efbb492f18b2b229a1c44f1f5a6a706b4866bf385aa9733897578f
SHA512

10e4e704f275c636ec2a801a5cf04128395e9e266e3fbda1d1cbe9816bef1a0a0f34b891b657a59252e03944abc898c54485625f29a0439b2304e33c0b283d23
SSDEEP

3072:7aOdi2Uu2fP2H8qrO/+1TKGes4H7EWoDgCNSrSf82bHylWsO:hdi+2fPorO/+1mF17EW9CNSi82DylWsO

Score

N/A

Malware Config

Signatures

Files

6253795ea4efbb492f18b2b229a1c44f1f5a6a706b4866bf385aa9733897578f
.exe windows x86

b3b84238de271facd907ccf595edf4da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
WriteFile
ReadFile
SetFilePointer
CloseHandle
GetModuleFileNameA
GetCommandLineA
CreateFileA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 347B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ