6bc316f91d3e73684786f5c12218fa0c10862af8648dea14220f6986f2a9d405 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bc316f91d3e73684786f5c12218fa0c10862af8648dea14220f6986f2a9d405
Size

999KB
MD5

bdeece8a2946962942448428cff1d01b
SHA1

0ff5ffa0da435f821f3c2d0b75a1752a05389e86
SHA256

6bc316f91d3e73684786f5c12218fa0c10862af8648dea14220f6986f2a9d405
SHA512

890808a24e13fdf0fd3f03d8aa9b022e15fbbb9b7779b48fcde6eaa7025981478405c31df4ec2e26ec5ad05c8c4b907e3af08d674b38d4c7be395758c17f8fd4
SSDEEP

12288:pxzmJg5lSKRsd50cAFILB1J1BXBOIC44w01Wnn7DZYytB1ia63:+ESysd50cYIV/1dBOICPl8nn7FYygT3

Score

N/A

Malware Config

Signatures

Files

6bc316f91d3e73684786f5c12218fa0c10862af8648dea14220f6986f2a9d405
.exe windows x86

4772a282eb6dc8978bceeba4e9b5c767

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
GetCurrentThreadId
GetVersionExA
GetSystemDirectoryA
TlsSetValue
WriteFile
QueryPerformanceCounter
ReadFile
lstrcmpA
SetFilePointer
GetCurrentProcessId
GetVersion
LCMapStringW
LoadLibraryA
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA

Sections

.text
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 635KB - Virtual size: 634KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ