0b6098f69e9e01a03a207ab51d415a8f69a37c3c9d1c912598120bdc87b45100 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b6098f69e9e01a03a207ab51d415a8f69a37c3c9d1c912598120bdc87b45100
Size

306KB
MD5

214d3b59997340ab4573bae80977197f
SHA1

596dca5dd4ea1a58dc615802517f2b4f0bbe1aee
SHA256

0b6098f69e9e01a03a207ab51d415a8f69a37c3c9d1c912598120bdc87b45100
SHA512

fb08cf53d93b43555d63ac16ef6e047090163f0669144a2d321f6f71cfab7a40b3881403cbd4dbb5b8ca341df2ece139a4f8d93529b54afbef34ca2488839728
SSDEEP

6144:NkE/NY+IhFwMaU3t8x6PEHaS5dm/yNVYo0TDBL8doFC2/nT7Q:qE/NVs7N3i0aaS5doyNVYo0TDK6cMnI

Score

N/A

Malware Config

Signatures

Files

0b6098f69e9e01a03a207ab51d415a8f69a37c3c9d1c912598120bdc87b45100
.exe windows x86

87a9d55f84c8ef7704c164b7b26520f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
lstrcpyW
GetCommState
GetProcessHeap
SetConsoleTitleA
GetVolumePathNameW
IsValidLocale
FileTimeToLocalFileTime
SetLastError
lstrlenW
VirtualAllocEx
lstrcpyW
DeleteFileA
GetStartupInfoW
lstrcpyW
CreateEventA
GetStdHandle
GetLocaleInfoA
GetModuleHandleA
GetModuleFileNameA
GetMailslotInfo
SetCurrentDirectoryA
lstrcpyW

termmgr

DllRegisterServer
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ