b62c059e0f233f6ee2413feffcf84d10cb3745406cf34effecd1101eca28c841 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b62c059e0f233f6ee2413feffcf84d10cb3745406cf34effecd1101eca28c841
Size

63KB
MD5

6544670be2e598af7fc8a8a23286ed0d
SHA1

aaa8816718247cff8a6968b548333a165ad083d8
SHA256

b62c059e0f233f6ee2413feffcf84d10cb3745406cf34effecd1101eca28c841
SHA512

4b912d85a29fd14d5c7b1da2e86a4490f4eff17d32ebe36df929d6d93d41dcf037b5299cb1c5461e3cf5dd936fd25fe51a92c68e16d805a20083d238e166a760
SSDEEP

1536:9wDnEKpE38wKZpkcPfY0yAWUF2Ak8nkQdXa0Zd:9gLpEsZpbP3u+ra0r

Score

N/A

Malware Config

Signatures

Files

b62c059e0f233f6ee2413feffcf84d10cb3745406cf34effecd1101eca28c841
.exe windows x86

c9d0c2a64b44afd4b669f87330bece75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
SetNamedPipeHandleState
FindFirstVolumeMountPointW
GetCommTimeouts
DebugActiveProcessStop
DebugActiveProcess
GetCommMask
GetCommProperties
InterlockedDecrement
GetConsoleCommandHistoryLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE