6133b1840fb3d851aa30134d58119a08dd80ad9829ec1f0ad25b4141a2ee1d01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6133b1840fb3d851aa30134d58119a08dd80ad9829ec1f0ad25b4141a2ee1d01
Size

76KB
MD5

0024a31d28037bd5c12c0a03e1974c30
SHA1

5081cdd0c5e71b02e57aa33e04b61d61d133d0d8
SHA256

6133b1840fb3d851aa30134d58119a08dd80ad9829ec1f0ad25b4141a2ee1d01
SHA512

c7bc5ac129867506909367e5ea6431f73070dec3f6838c500026d67b9fd155d32af400a27c11e55be0e8cb1b2eb2062815a5a4624fc634f00705359a91e6d49f
SSDEEP

1536:lzRplTYEE8u2TPkRcmJ0GShZytcX1FUtxMQlpjVrs2ryrd1vUQuq6:lzRTu2TPkH0PrqcFGmoHs2qo

Score

N/A

Malware Config

Signatures

Files

6133b1840fb3d851aa30134d58119a08dd80ad9829ec1f0ad25b4141a2ee1d01
.exe windows x86

af29ea82c0cb2f2411861d5b7cad591c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlZeroMemory
OpenFileMappingA
FindFirstVolumeW
BindIoCompletionCallback
GetModuleHandleA
MoveFileA
GenerateConsoleCtrlEvent
GetExitCodeThread
GetNlsSectionName
ScrollConsoleScreenBufferW
Process32Next

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE