6ffa0c44e49188b0ceef5c3967f481736e722f6f809f442bdd74acd35103f003 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ffa0c44e49188b0ceef5c3967f481736e722f6f809f442bdd74acd35103f003
Size

305KB
MD5

3f67e97a401f2c5807c1abc7eb180eeb
SHA1

cb1ac8c900c74fe57976e084fdcd27167cc09267
SHA256

6ffa0c44e49188b0ceef5c3967f481736e722f6f809f442bdd74acd35103f003
SHA512

3c5cd1412ae77a4d3e320ea8802e3bd24117adc4460950895ed5cc9f423f6b2b10d3acf43327643f8adaa71e8d4de863679d926508d7e40e0edcfff32c32da12
SSDEEP

6144:qjHKsCvKD0AKkAkg5k66Y1KO0kqBDj+e:q2fK0p16Y1KOTWv+e

Score

N/A

Malware Config

Signatures

Files

6ffa0c44e49188b0ceef5c3967f481736e722f6f809f442bdd74acd35103f003
.exe windows x86

31c50f5670cf43c0c89ed6ca3c785ce2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
GetStringTypeW
DeleteFileA
GetStringTypeW
Heap32Next
DeleteFileA
GetVersion
LoadLibraryA
GetProcessHeap
SetFilePointer
GetExitCodeProcess
HeapFree
GetModuleHandleW
SetEnvironmentVariableA
CreateFileMappingW
HeapCreate
SetCurrentDirectoryA
GetShortPathNameW
CreateMailslotW
GetConsoleAliasW
GetACP
GetConsoleTitleA
DeleteFileA

mstscax

DllUnregisterServer
DllGetTscCtlVer
DllRegisterServer
DllCanUnloadNow

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ