b6785abe816e2b9285399eabd74dc6eb06318e52022716f908eda60b998a3b78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6785abe816e2b9285399eabd74dc6eb06318e52022716f908eda60b998a3b78
Size

293KB
MD5

f0b52a674d1f1ac4561ed6e6f3f1a2a3
SHA1

211ad20a8ea7c741c690d16753ed6a4f976bf22f
SHA256

b6785abe816e2b9285399eabd74dc6eb06318e52022716f908eda60b998a3b78
SHA512

77d7b69ab128d11b97b2387d6f25696b113dd162dcf6c22828be50c46282cc388a02cd3d4aabdd0fe2ddd34a9eb774bac9bcab5cc3d3c195e3f2f557f29fbcbe
SSDEEP

6144:Ut8+VUuzgQKH7kNRfwF02oVPm3dMWVtQu7zVmRkLv:Ut8+VULQaF02oYNXVtl9mRkj

Score

N/A

Malware Config

Signatures

Files

b6785abe816e2b9285399eabd74dc6eb06318e52022716f908eda60b998a3b78
.exe windows x86

32ca8d5fca836efa8536566f0eee05c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA

Sections

BitArts
Size: 253KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE