6c0aabab2406cf449205232530c3ee4ea4113fc52f5616e5c00f74083a3b3ac9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c0aabab2406cf449205232530c3ee4ea4113fc52f5616e5c00f74083a3b3ac9
Size

368KB
MD5

2d0a5bba1e64647a40c8d9cb590b4251
SHA1

700859381ee237732739f3af77e401a47c0474c2
SHA256

6c0aabab2406cf449205232530c3ee4ea4113fc52f5616e5c00f74083a3b3ac9
SHA512

b35e8602472c9c417a7e6ab8565d6c7d46b600c79382e8ab6fcb92b8ebb36831db34b27474abc2c60fc0cad16e1f4e532e1890c703e85b4d849344205648b8c9
SSDEEP

6144:e5oVWrKzJdrj6p/V5R9DDLKZ4Co4wQCJMKNff7C18ZbqN7rV6hD7zrds/Cvt+v:e5lKzJdj6p/nRZDkqBQqNfzu156xpS

Score

N/A

Malware Config

Signatures

Files

6c0aabab2406cf449205232530c3ee4ea4113fc52f5616e5c00f74083a3b3ac9
.zip
morozko_tfile_ru_avi.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 446KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ