c6efe97430cd594365280c907a0a0f77dceb8f1c5ff4006d05e85c41bd690845 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6efe97430cd594365280c907a0a0f77dceb8f1c5ff4006d05e85c41bd690845
Size

113KB
MD5

7852d7812487cef06a06d5f9a2882b63
SHA1

e59539b3eb67eb9e2f5f19c3d2920bd190f0888d
SHA256

c6efe97430cd594365280c907a0a0f77dceb8f1c5ff4006d05e85c41bd690845
SHA512

c0fb7938f35fc804da151153e5036b731cb718dd02ddca941e29d1f7c4791cdf1599f6017cf588eba1a00364211c0f82c741b4c2288d92a17ecbc41105dbb06d
SSDEEP

1536:LhgGNNGJ43wQwz96/UDNapHdC7xfHJa51IcUw0i/Wrsm7SKzoXV0OiG1RSRKq:LhY+3w76c0UHJw1XHPerspNnPScq

Score

N/A

Malware Config

Signatures

Files

c6efe97430cd594365280c907a0a0f77dceb8f1c5ff4006d05e85c41bd690845
.exe windows x86

eaa9dbcaaf6db4dad612338acafc7ce9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetCommandLineW
GetFileType
GetACP
DeleteFileA
Sleep
FreeResource
ExitThread
GetProcAddress
GlobalAlloc
GetModuleHandleA
GetCommandLineA
GetModuleHandleW
LoadLibraryA
LocalAlloc
VirtualAllocEx

Sections

CODE
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ