6d84da45ffefc264345ad38ab0771dc516a31e8cdb535afc4e7ee0756ffd1e28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d84da45ffefc264345ad38ab0771dc516a31e8cdb535afc4e7ee0756ffd1e28
Size

504KB
MD5

0f54127ed5735642b4a6b4485088b190
SHA1

55fb398493d9584431cf766bbf35e87d90c96a31
SHA256

6d84da45ffefc264345ad38ab0771dc516a31e8cdb535afc4e7ee0756ffd1e28
SHA512

3c6263aa462a3a9df6ac26822f543184935aad411d8097e398fa591c0c334e2bfd02ae47b0071806a7ecc0cedf0b10c01423ee891c331105c06e1532c8626373
SSDEEP

12288:1cBiE7J2i18jAKg8vteexM/TSbV+qcq+eivznGnkWAQGqDLK9K:1M/Mw8vtee4TSbMXvzniAQGqD

Score

N/A

Malware Config

Signatures

Files

6d84da45ffefc264345ad38ab0771dc516a31e8cdb535afc4e7ee0756ffd1e28
.exe windows x86

4c6232c9f24694db1e69cf761e44e404

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetConsoleTitleA
GetVersion
GetModuleHandleW
lstrcatW
GetTickCount
HeapCreate
IsValidCodePage
GetShortPathNameW
GetModuleHandleA
SetLastError
TlsAlloc
SetFilePointer
GetDriveTypeA
HeapFree
GetStdHandle
lstrcmpiA
GetExitCodeProcess
SetEnvironmentVariableA
GetLogicalDrives
GetLastError
SetPriorityClass
GetLocalTime

netshell

DllCanUnloadNow
DllGetClassObject
HrLaunchConnection
DllRegisterServer

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 498KB - Virtual size: 1020KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE