d6cb2b04d3ce0498d79b20cdd03b3266c768b2fb9b2ab9ca949aee7868ff4a10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6cb2b04d3ce0498d79b20cdd03b3266c768b2fb9b2ab9ca949aee7868ff4a10
Size

2.6MB
MD5

fc63bec5741e43bb2047c3c1fdf76740
SHA1

6ff4a4b8cc6e91b467898bc9b42ca72c8e58747f
SHA256

d6cb2b04d3ce0498d79b20cdd03b3266c768b2fb9b2ab9ca949aee7868ff4a10
SHA512

84afb42da694b85fe8ce3a6ac8b9d3fc7a7666454e3cb8f6e2e9538cf6edd17b735bfc5fbcf9e095b40539832decba50d57cb72bc79f7e28c25be5c87143c227
SSDEEP

49152:dTuhtP4Otih0AjMfQSLH4qDSDuP2TIA/5Q9kq/f3+hy7owEWaxZRKCD5Jz/ApHYb:cah0NNDsuP2TBYPH+hlwEWcjbDnMFYoO

Score

N/A

Malware Config

Signatures

Files

d6cb2b04d3ce0498d79b20cdd03b3266c768b2fb9b2ab9ca949aee7868ff4a10
.exe windows x86

20de7471fdf71f91bc692ee85984b73e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetCurrentProcessId
GetDriveTypeA
GetFullPathNameA
SetFileAttributesA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
GetVersionExA
GetTickCount
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetModuleFileNameA
ReadFile
GetFileSize
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
memset
strrchr
strchr
??3@YAXPAX@Z
strlen
??2@YAPAXI@Z
__CxxFrameHandler
strcmp
malloc
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
strcpy

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ