cb6576898f69a93047e9d7e796627679a52af3149be3bd6f5be3c13d9194be5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb6576898f69a93047e9d7e796627679a52af3149be3bd6f5be3c13d9194be5f
Size

813KB
MD5

99661be6610d6f9327bb874a18973b43
SHA1

4cbeefcfaf9739f9fc1be6774e06e5f7ac7249fd
SHA256

cb6576898f69a93047e9d7e796627679a52af3149be3bd6f5be3c13d9194be5f
SHA512

f968cabd4b7b50187d1832196b5d1cc9a504bd53c619fe9edb324575499e8cd7d7310c53a513319fa0e1d0375a354973f8ae355302dc9b483dc5c7891dcc81d0
SSDEEP

12288:K9Q5tco6asYmIyUaneotA4kiF0yQ0l4LAX2mzCbcne5XFrFNXrsA7V06oNc2gFY:N/V6afy/DVF0P0WMzioArFNXrs+gNcD

Score

N/A

Malware Config

Signatures

Files

cb6576898f69a93047e9d7e796627679a52af3149be3bd6f5be3c13d9194be5f
.exe windows x86

2a9dfa1eb861fa099aac19e8ab20dc2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
lstrcpyW
VirtualAlloc
TlsGetValue
DeleteFileW
GetPrivateProfileIntA
GetModuleFileNameW
lstrcpyW
GetNumberFormatA
lstrlenA
GetModuleHandleA
GetCurrentProcess
GetStartupInfoW
CreateEventA
GetFullPathNameA
lstrcpyW
FindNextVolumeW
SetCurrentDirectoryA
lstrcpyW
GetLocaleInfoW
SetConsoleTitleA
TlsAlloc
TlsAlloc

usp10

UspFreeMem
UspAllocTemp
LpkPresent
UspAllocCache

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ORPC
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 796KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE