dcb1b165f62f019e19b727db614f6c246722c6006d0c01edd871335219714eff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcb1b165f62f019e19b727db614f6c246722c6006d0c01edd871335219714eff
Size

6KB
MD5

1851182df6bb26f9416286142f0fb281
SHA1

8b110b416e2f1cd858f6aed7368025ba4687ee9c
SHA256

dcb1b165f62f019e19b727db614f6c246722c6006d0c01edd871335219714eff
SHA512

9f6a78b6b562e2a1cd5acec5aa416875711a772b67f693df861b0f3e79f430e35b49e0d293d6731e999a4008333df5bea2614e69b07962561f4bb916b7ab008b
SSDEEP

96:IgiAPx6e1KvbFFWIzK7HTHKQJzYcwpMlC9C5lO+v7F:Igj5WWIzwz7JzYcwT9C5M+v7F

Score

N/A

Malware Config

Signatures

Files

dcb1b165f62f019e19b727db614f6c246722c6006d0c01edd871335219714eff
.exe windows x86

ea35f161f213eb165d23967341f70c48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
RemoveDirectoryA
DeleteFileA
GetModuleFileNameA
Sleep
CloseHandle
CreateThread
ContinueDebugEvent
WaitForDebugEvent
DebugActiveProcess
WaitForSingleObject
CreateProcessA
ReadProcessMemory
ResumeThread
WriteProcessMemory
MoveFileA
CreateDirectoryA
GetCurrentProcessId
GetTempFileNameA

Sections

.init
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE