6a87536930d5bf173a4d509bceea5b1ee7c3f5e54076f0a435c0ff57dc424856 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a87536930d5bf173a4d509bceea5b1ee7c3f5e54076f0a435c0ff57dc424856
Size

62KB
MD5

73dcdf3fd5f9234f1682bcdefec4b596
SHA1

c96ffe08b3b014effbc2bb3ee9b37856aa63e03d
SHA256

6a87536930d5bf173a4d509bceea5b1ee7c3f5e54076f0a435c0ff57dc424856
SHA512

4fe3588326cd65c3d1b65b3a200cc2bf60f3fb889846442e4e919c1f358a4265e3560c61e2dbc9f247c3806d443e148ae1e8b05631b0abdad76033b2add61efe
SSDEEP

1536:YGSN5ObREhaOEtUVX8swARh7dVNivCjsRSHSUG6XV2EQ6pb7KLW:YNN5taOEtUd88x8FSVBpH

Score

N/A

Malware Config

Signatures

Files

6a87536930d5bf173a4d509bceea5b1ee7c3f5e54076f0a435c0ff57dc424856
.exe windows x86

ede845896c0f98f9fe415a1af1ffc9be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
ReadProcessMemory
SwitchToThread
lstrcpyA
GlobalGetAtomNameA
SetConsoleFont
WaitForMultipleObjects
SetSystemTime
CopyLZFile
EnumResourceLanguagesW
FreeEnvironmentStringsW
FindNextFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE