6b3fd77a3d4d833a37dc4ec381867f024927d3b454141db9a6f491dbdab4186c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b3fd77a3d4d833a37dc4ec381867f024927d3b454141db9a6f491dbdab4186c
Size

299KB
MD5

196c089a2fd3043bd1d9696555cae55b
SHA1

bda280eb5fdf7a464f018623082a6ac6680fce53
SHA256

6b3fd77a3d4d833a37dc4ec381867f024927d3b454141db9a6f491dbdab4186c
SHA512

93f2587586574277108cbb8104045a3066816b879572cc12b5c1003e1b042f22d17f0964498e795b05593f47c15c7c0c7e1297ea4cbf0d34c80f57ffcfc70db6
SSDEEP

6144:PZMFsm8boZhclM7L15sv6MMLFhzeCvVeXZj:PQwoZhBhivdozeCIZj

Score

N/A

Malware Config

Signatures

Files

6b3fd77a3d4d833a37dc4ec381867f024927d3b454141db9a6f491dbdab4186c
.exe windows x86

d9f48f288d3a67f1e397f97ace65410a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
SetVolumeLabelA
CreateEventA
CopyFileA
FindClose
CreateSemaphoreA
GetCurrentDirectoryW
VirtualFree
GetFullPathNameW
GetFullPathNameW
CreateFileMappingA
CreateMailslotA
GetEnvironmentVariableW
ReadConsoleW
CreateFileA
FindClose
Sleep
CreatePipe
GetVolumePathNameW
FindClose
GetStringTypeA
GetModuleHandleW
HeapCreate

mshtml

DllCanUnloadNow
PrintHTML
ShowModalDialog
DllGetClassObject

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES
Size: 292KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ