6bb54c53e0592d89cd4744b47bf73e38a6a6ffd9ceeb326634b6408855412433 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bb54c53e0592d89cd4744b47bf73e38a6a6ffd9ceeb326634b6408855412433
Size

404KB
MD5

0c166a8dc38fcb9530423eb7e0fa694c
SHA1

64ef3ce0db1fb70b3d64d81c30fd77ea0ef59d4d
SHA256

6bb54c53e0592d89cd4744b47bf73e38a6a6ffd9ceeb326634b6408855412433
SHA512

003df9de21bd9bc295b57398f409ac0d308e5723e52ee0e12d92ada19740ab7fc79bdd1d1ff6f367b9e74f28d9f7fe2a6ad00f7a14b18f7aef8e8261bbc09e93
SSDEEP

12288:bJOP5daVTxtvM0Fb54gCwG7p13NJP5ouzv3:bJOXadxF3Fb9D4L9Jhz

Score

N/A

Malware Config

Signatures

Files

6bb54c53e0592d89cd4744b47bf73e38a6a6ffd9ceeb326634b6408855412433
.exe windows x86

6a64e39c9d950b9416b3efc0d1a29cc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
Sleep
GetModuleHandleA
InterlockedExchange
OpenEventA
CloseHandle
SetFilePointer
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
MultiByteToWideChar
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLastError
ReadFile
FlushFileBuffers
LCMapStringA
SetStdHandle

user32

LoadIconA
EnableWindow

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 336KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ