6a87b00b52a47a66f1ec9265dc55c573f403ee8f835e6a76dcc9c27168e7d78d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a87b00b52a47a66f1ec9265dc55c573f403ee8f835e6a76dcc9c27168e7d78d
Size

130KB
MD5

7e3cebeb613ccf7199910998b20afa28
SHA1

a4afca23ff3d8a58c1cb4112ec2630efcfca96a5
SHA256

6a87b00b52a47a66f1ec9265dc55c573f403ee8f835e6a76dcc9c27168e7d78d
SHA512

28921055e1131b9abf08eaef9435b273e8a0b8829ec5b9df4ad41a1308733cfd6255fb9adc9af18e3f21e7a60c8c1d651cff1008f9237edeb955803eb9e4e401
SSDEEP

3072:wpd/Du8U5Lh2OgNzEFYnCsxcQqtA9Yev:6wpV2OgNgqCsxcjb

Score

N/A

Malware Config

Signatures

Files

6a87b00b52a47a66f1ec9265dc55c573f403ee8f835e6a76dcc9c27168e7d78d
.exe windows x86

ff216b3e57d50be30bf0e18e672ea8cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
VirtualQuery
GetStringTypeW
GetStartupInfoW
GlobalFree
GetStringTypeExA
SetCurrentDirectoryA
GetModuleFileNameW
GetModuleHandleW
VirtualProtectEx
lstrcpynA
GetProcAddress
GetProcessHeap
GetCommandLineW
GetCurrentProcessId
lstrcmpiA

msvcrt

__p__fmode
__getmainargs
calloc
_adjust_fdiv
__p__commode
__p___initenv
_XcptFilter
_controlfp
__set_app_type
__setusermatherr
_initterm
_exit
_except_handler3
free

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 27KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ