a6b8597002266c9564c08088d85e9ccebbf044a93c5610a439d1e25813693cee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6b8597002266c9564c08088d85e9ccebbf044a93c5610a439d1e25813693cee
Size

309KB
MD5

307154b498872993d872efd588b50040
SHA1

ba359ecd1c998d63ac7a3924f82e1471ce963771
SHA256

a6b8597002266c9564c08088d85e9ccebbf044a93c5610a439d1e25813693cee
SHA512

ae7d9de7aab7ec175b013ab759ef3cf1d0dcbc5afb249f5e0688f2df7fd9b27d410d2537c447386bfb1c217694a3c640830b6194ce624cd1066591e377acb949
SSDEEP

6144:j7jrrjdedE0biylu026YtF5A8zkc5PKpy6le3bc:j/rr36iylHxY768zkuKpy6le3Q

Score

N/A

Malware Config

Signatures

Files

a6b8597002266c9564c08088d85e9ccebbf044a93c5610a439d1e25813693cee
.exe windows x86

9241eba3895c52b1b6123df3372cc8cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
ExitProcess
InterlockedIncrement
GetDiskFreeSpaceW
lstrcpyW
GetPrivateProfileSectionA
GetLongPathNameA
GetACP
FindResourceW
GetPrivateProfileIntA
SetEnvironmentVariableA
GetStringTypeW
GetPrivateProfileIntA
VirtualAllocEx
GetDiskFreeSpaceW
InterlockedDecrement
WriteFileEx
GetExitCodeProcess
lstrcmpA
GetCurrentDirectoryA
Heap32First
WaitForSingleObject
LoadLibraryA

apphelp

ApphelpCheckExe
SdbCreateMsiTransformFile
AllowPermLayer
ApphelpCheckIME

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg
Size: 304KB - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE