6fbedadb3d5ee38e22bc59230b32285138a6fee9248e9a313ff2f78c6d43787f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fbedadb3d5ee38e22bc59230b32285138a6fee9248e9a313ff2f78c6d43787f
Size

66KB
MD5

f3374d7974adf9c0efd220eb0167dc17
SHA1

631bd2060d49e4e4a8e243e114ced3c1e1f98327
SHA256

6fbedadb3d5ee38e22bc59230b32285138a6fee9248e9a313ff2f78c6d43787f
SHA512

f2e49d8a72bad5b962347c3910f9e0d458d8a66a4a8b6b43b185b8b6240dbe9645cfbfca93e1c2496ffbf791c2b22d0d970aba760a9d1d3cc77da430377ac10e
SSDEEP

1536:/mSj7qwsLdKfMPOD7iPjuMN3DcLXX+h7aNnqJxxVfBd:/BnSEfMPODwjhDcSh+NnG1fL

Score

N/A

Malware Config

Signatures

Files

6fbedadb3d5ee38e22bc59230b32285138a6fee9248e9a313ff2f78c6d43787f
.exe windows x86

d88d23d25195759918336506c961079d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsA
ReadFileScatter
GetProfileStringA
ReadConsoleOutputA
GetConsoleAliasExesLengthW
WTSGetActiveConsoleSessionId
WriteProcessMemory
GetStringTypeW
HeapSetInformation
CompareStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE