61b1c0cc6d3632b72d55e22e4ef1c95355e3e4ccf5d25f8707f120105ed46c8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b1c0cc6d3632b72d55e22e4ef1c95355e3e4ccf5d25f8707f120105ed46c8a
Size

120KB
MD5

5ac1be55c10099237ebc7232ca08e15f
SHA1

12a9e69b27a9e0b2a1f415febc8b31a8c1748463
SHA256

61b1c0cc6d3632b72d55e22e4ef1c95355e3e4ccf5d25f8707f120105ed46c8a
SHA512

6caa480d6fa51635863ffb49991c28beb529ce9702432f56cf888b26ac76bd7381706ab3fdd06f31266a49556f6dec51cecef71fda24a54b7b17ebef5bb8ea35
SSDEEP

1536:4C9l2fLfJTK3e5NKHBPKin3CuaOolLfAV2fXm9:4CgbJTqtKin3CColTAV2vm9

Score

N/A

Malware Config

Signatures

Files

61b1c0cc6d3632b72d55e22e4ef1c95355e3e4ccf5d25f8707f120105ed46c8a
.dll windows x86

fa5b988a44fc4d613294a77054f020f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ