b6b9aef8f84e2717dd5d6d7331700563b4f5105f4d2a4d8d1e46fc7d7de507de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6b9aef8f84e2717dd5d6d7331700563b4f5105f4d2a4d8d1e46fc7d7de507de
Size

299KB
MD5

a54ee6150b325b90c6749f7f1874baac
SHA1

3b704202fd0c7655f7180ba03021b5a35c36d400
SHA256

b6b9aef8f84e2717dd5d6d7331700563b4f5105f4d2a4d8d1e46fc7d7de507de
SHA512

33d94cf28d512d1448fe641a5918bd7c5fdb860e2b2c33182bdb539eac3603b45592aeb8f6e95308a8f5ea857f059e0076da747fb27c4fc424a58d9ec485e92f
SSDEEP

6144:bKK5i9cvxEIHugMPSoVC31tosOiwSSzzcuqpiPaP5wL/G:G9kxEIZiC3nflwSGcriCRwL/

Score

N/A

Malware Config

Signatures

Files

b6b9aef8f84e2717dd5d6d7331700563b4f5105f4d2a4d8d1e46fc7d7de507de
.exe windows x86

acb387b3aee05e4a50ae55599974df99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualUnlock
TerminateProcess
ExitThread
GlobalDeleteAtom
CreateProcessW
EnumSystemLocalesW
GlobalFindAtomW
DeleteFileW
GetProcAddress
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ