b69aae27523c15c32f3ae49bd67cbe4fd98087b32cf6485b5399ab882bc1dcb1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b69aae27523c15c32f3ae49bd67cbe4fd98087b32cf6485b5399ab882bc1dcb1
Size

63KB
MD5

e6a70c6087b0d50718e89915c120b6ab
SHA1

1b7ddd910ac548187f9fbe7094bb8b6f045b7de6
SHA256

b69aae27523c15c32f3ae49bd67cbe4fd98087b32cf6485b5399ab882bc1dcb1
SHA512

3ecb71dc3ba555746a6bb69229dc7d297b269a0ef0acfd631399a741a72170d1f041b48d24090d97c482ba3ff26b2cdc7e4e051ad2d91350bd323555fe514a57
SSDEEP

768:xzHeRUGvbVNQP6Bs70oSjBI2l+2QDpFj5JEmwCwpWp8y3mF7nIrNtXxR41E8OBiV:JyLVoh2QkmwrphFLILXU1Et3LlOv3pDh

Score

N/A

Malware Config

Signatures

Files

b69aae27523c15c32f3ae49bd67cbe4fd98087b32cf6485b5399ab882bc1dcb1
.exe windows x86

84485caa739ecf27e35d925f26129cd9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFileW
GetFirmwareEnvironmentVariableA
IsValidUILanguage
ReadConsoleA
GetCurrentActCtx
RegisterWaitForSingleObjectEx
RemoveDirectoryA
GetLocalTime
WriteProfileStringA
DosPathToSessionPathW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE