b6e32523c5d439f563eb2b60152af037f7fceb66ee371d37200c0cb8f6bdae14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6e32523c5d439f563eb2b60152af037f7fceb66ee371d37200c0cb8f6bdae14
Size

94KB
MD5

ac0869a5c7d271f7b1ddf410ac59a21e
SHA1

5797dd3cad55758f4d7183c6f2de804e6f4702e9
SHA256

b6e32523c5d439f563eb2b60152af037f7fceb66ee371d37200c0cb8f6bdae14
SHA512

2caaa67e1d36deba8a88d9c04a830e559fa9b921d26c963b9738cf10b7a95e89303fcf774f8822b72b3ee93cfdef3cd0cb3888371d5d3b8ca1ef0c34fbd956d2
SSDEEP

1536:ES0eIzU0Y/kWmbiItudngIrMJflroRD5I3mc8YaEJwZK4/83ZoMOALF6SSf:EmSomeJdg6MNlUR0mhZEXtpxLF6H

Score

N/A

Malware Config

Signatures

Files

b6e32523c5d439f563eb2b60152af037f7fceb66ee371d37200c0cb8f6bdae14
.exe windows x86

b2253fc668caff6ee37944cd1a61c479

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocalPrimaryComputerNameA
ReadConsoleInputExW
FindCloseChangeNotification
GetEnvironmentStringsW
DeleteFiber
CreateProcessA
CreateFileA
MoveFileExA
GetNumberFormatA
CreateMailslotW
SetThreadAffinityMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE