c6f4e406e4ab250f887c6e9fba5ec40da69a854654ddd703c86a6b1ce6a96666 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6f4e406e4ab250f887c6e9fba5ec40da69a854654ddd703c86a6b1ce6a96666
Size

127KB
MD5

0a9b05a2772aeebdbcd453a50437efaa
SHA1

1f028bc1fa4a74718f6f9b830881fed717cdab2d
SHA256

c6f4e406e4ab250f887c6e9fba5ec40da69a854654ddd703c86a6b1ce6a96666
SHA512

afc8b3759135e44a739755c290dc3ba780c66d2578339b3a913fd304a475f558317707d05b482fc8993ba9d661d84d1e2acacd17c80133abd69bc4e160cb4d82
SSDEEP

1536:dncfcZRXDD3FM5BbbQnxSikVc5t+yYZZqiNpjLnTe1vFcV0smN1WVdcZmtEXL87x:NwSRCngx60YZFTgKismuAJg7QzoLlNlr

Score

N/A

Malware Config

Signatures

Files

c6f4e406e4ab250f887c6e9fba5ec40da69a854654ddd703c86a6b1ce6a96666
.exe windows x86

11ff4162993d8ec2ab9d04b4112d5f31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeExA
GetProcessHeap
SetEnvironmentVariableA
ExpandEnvironmentStringsA
SetFileAttributesA
WriteConsoleA
GetCommandLineA
GetStartupInfoW
GetTimeZoneInformation
GetCommandLineW
GlobalUnlock
VirtualProtectEx
GetFileType
DeleteFileW
RtlUnwind
GetCPInfo

msvcrt

_controlfp
_XcptFilter
__setusermatherr
_adjust_fdiv
__set_app_type
__p__commode
__p__fmode
_except_handler3
calloc
_initterm
free
_exit
atan2
__p___initenv

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE