c6ce2056f88694e4792ee7cc082f5a9160c0f173ab9e0ade70e183c0f2e3296b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6ce2056f88694e4792ee7cc082f5a9160c0f173ab9e0ade70e183c0f2e3296b
Size

55KB
MD5

d30c58312357b7b35cdce74942c1204c
SHA1

fff26ce9231c383e535f3ced6c0a04c6ee332b95
SHA256

c6ce2056f88694e4792ee7cc082f5a9160c0f173ab9e0ade70e183c0f2e3296b
SHA512

aeb389a388a7bd5318846e9986ea6171272a7f8ae541a76852353151166b3beede429903c747e0f5191f904dec7207e526568f47c2a039b191de881b33694e6b
SSDEEP

1536:Rb/nbcc+Un8ljjD/V0krMnNvDJHXtc41xRPTapvKcUY:VPJ+ZpDN0krCtcOPTat/j

Score

N/A

Malware Config

Signatures

Files

c6ce2056f88694e4792ee7cc082f5a9160c0f173ab9e0ade70e183c0f2e3296b
.exe windows x86

c92746cd3b69c56e5c4ed6d3f9854fa1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
FreeLibrary
VirtualProtect
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA

user32

MessageBoxA
wsprintfA

Sections

.data
Size: - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 288B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ