f6d4e223585141fc5cac72c6637470d49466fac73ca688c1acf0414da0496cb2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6d4e223585141fc5cac72c6637470d49466fac73ca688c1acf0414da0496cb2
Size

94KB
MD5

3b866c57c935f554757773deb1215550
SHA1

8d4c7ede1a4a4b0c72259d7b600c1291875f511e
SHA256

f6d4e223585141fc5cac72c6637470d49466fac73ca688c1acf0414da0496cb2
SHA512

85787aefbe6d00b46f4dc99d76f0e0db9fd9262bb6740aa09566f35966058a4c17a3d0f298c03b81e840d2970c276e6af54dfcbc41bf1909112dba634c084172
SSDEEP

1536:D6xESnOhHH2pxLcJROVoiJlhL7c8YaEJwZK4/83ZoMOALLbwTc:+xEHRsLciqUXL7hZEXtpxLLbCc

Score

N/A

Malware Config

Signatures

Files

f6d4e223585141fc5cac72c6637470d49466fac73ca688c1acf0414da0496cb2
.exe windows x86

3361c1d03e7c487328f815b916fb3c0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapQueryTagW
BuildCommDCBA
CreateMutexA
DebugActiveProcess
GetConsoleCommandHistoryLengthA
FillConsoleOutputAttribute
GetModuleHandleW
CallNamedPipeW
GetCurrencyFormatA
LocalAlloc
GetConsoleKeyboardLayoutNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE