e6217b6b26141ade960442cf76353a4e774111f95112935fa00ec7e2b4b55596 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6217b6b26141ade960442cf76353a4e774111f95112935fa00ec7e2b4b55596
Size

112KB
MD5

95d317aa64bb65885e1d40a3cc761208
SHA1

2b9e89897fe82fae7c3b7448b1e5f594361c6835
SHA256

e6217b6b26141ade960442cf76353a4e774111f95112935fa00ec7e2b4b55596
SHA512

59272f02474631298e4cc79908c967df5e2dc5470cd367f0b212ce99ecc5125349fe3a927758fd314ad11314be4f994554dd7c087d8fd46162517fd3676924ed
SSDEEP

3072:ND0o/G0s1X2Jl/0SmYJXu0m8Y6qRoXz0K:Nn+N1X2//nz1YlGXz0K

Score

N/A

Malware Config

Signatures

Files

e6217b6b26141ade960442cf76353a4e774111f95112935fa00ec7e2b4b55596
.exe windows x86

36b837fe235a7731b57132081a9c4981

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EndUpdateResourceA
lstrcmpiA
lstrcmpiA
GetDriveTypeA
lstrcmpiA
lstrcmpiA
FileTimeToLocalFileTime
GetPrivateProfileStringW
TlsFree
GetTickCount
GetStdHandle
lstrcatW
CreateNamedPipeA
GetLogicalDrives
lstrcmpiA
Sleep
GetBinaryTypeA
GetModuleHandleA
HeapCreate
GetExitCodeProcess
SetLastError
CreateWaitableTimerW
IsValidCodePage

ntmarta

AccFreeIndexArray
EventGuidToName
AccConvertAccessToSD
EventNameFree

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 607B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ