c6c0a41e6ac3820b800a50fe33e2d68f33186ab12a7594d508367279a8800c5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6c0a41e6ac3820b800a50fe33e2d68f33186ab12a7594d508367279a8800c5a
Size

36KB
MD5

a87d6947676ff5413c51e0875820dbf1
SHA1

5ce8beb2996d73d74a37445856928aa2c008fc13
SHA256

c6c0a41e6ac3820b800a50fe33e2d68f33186ab12a7594d508367279a8800c5a
SHA512

d7bd0a56887a80fe7ceaea9cc40884acabb20a179cde32b468a3de454a0f6d927af745e12cc0bd3d38f608382de3909ad5864ae0de9911a76b187f621015fc0b
SSDEEP

768:UWc2qoGQdbb5S2mKnvxMSy6FcICGuASN611cVDFvYqPIpzSRzLNn+Fnf:lc2qoGin5S2mWvxMSPcICGuASNw0ZvlG

Score

N/A

Malware Config

Signatures

Files

c6c0a41e6ac3820b800a50fe33e2d68f33186ab12a7594d508367279a8800c5a
.exe windows x86

8794f837d5bc6f169b9b6fbbeaafb4a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
Sleep
HeapDestroy
QueryPerformanceCounter
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetTickCount
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE