6d7736b875bd9c34198e55949e2c35614c52f6b00870949aad22687ee0098d41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d7736b875bd9c34198e55949e2c35614c52f6b00870949aad22687ee0098d41
Size

76KB
MD5

c06108af96382ce37705deada1328bb0
SHA1

bbcc92199d583a13dc68df4c15cae60d359f3152
SHA256

6d7736b875bd9c34198e55949e2c35614c52f6b00870949aad22687ee0098d41
SHA512

6090120f5514433f11aa618631150117a01c77d5ef7fcdfbd719d4ee99b556b927bd1938d2061be07daa604ef9752a3ee5ab7baac26d0f841fdbf86131cdedba
SSDEEP

1536:JrVhGHcRDJmIRYwO9YduHbQI9FCTbkGpjVrs2ryrd1vUQuq6:JLGHWmMOewbQiFC1Hs2qo

Score

N/A

Malware Config

Signatures

Files

6d7736b875bd9c34198e55949e2c35614c52f6b00870949aad22687ee0098d41
.exe windows x86

c39a0e8097aafb4c8f929a2abc3491f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlen
BaseCleanupAppcompatCache
FindFirstVolumeMountPointW
FindResourceA
DecodeSystemPointer
IsProcessorFeaturePresent
FindFirstVolumeMountPointW
GetProcessIoCounters
ReadConsoleOutputW
GetStartupInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE