c6143d79b4d1dd3d94b4357153df91a44df7e0aa858d056a2e7db657cf9825f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6143d79b4d1dd3d94b4357153df91a44df7e0aa858d056a2e7db657cf9825f4
Size

384KB
MD5

a51bcfd36c351ef6703a0c8026942d25
SHA1

b2443f128fb8ba6026e4e37bb921b2b96d9a4b01
SHA256

c6143d79b4d1dd3d94b4357153df91a44df7e0aa858d056a2e7db657cf9825f4
SHA512

905eccd296b20cf77d58859d9586cc5db672b403bc005c4ee92fa9fef3eb40a1f51fadd9a2d4e1673615eca59f976a556016966f601d75c9576b304804b48c67
SSDEEP

6144:iKL2emMX3AIgmnRjGTrZUxGgsh2RTLEyIxgiOzponWA3fIWx6kigC5nWws:iKLZmMHAIgmVGut1LEyIxaonNfV6l5nB

Score

N/A

Malware Config

Signatures

Files

c6143d79b4d1dd3d94b4357153df91a44df7e0aa858d056a2e7db657cf9825f4
.exe windows x86

a981e01d31d90eea6dd4e41706908ed2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetProcAddress
VirtualAlloc
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeW

user32

GetActiveWindow
ShowWindow
SetActiveWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 519KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ