d6859ff98f04ec3945254288a89b20103887df66c0327611cf8812bbcb8d6092 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6859ff98f04ec3945254288a89b20103887df66c0327611cf8812bbcb8d6092
Size

69KB
MD5

e1d8cf490049671168d0fd535ad2b630
SHA1

a0d9765814186751b764a4ee4c0b336a0557e7e1
SHA256

d6859ff98f04ec3945254288a89b20103887df66c0327611cf8812bbcb8d6092
SHA512

5562430df692e3f2f1fedd3ebe4fe2cedba58b1d19d6237f7044caa3c05129703a2ff18cb35c64656de6110c36f80ae9b5b899f0d024dfb5185462e8b03e0253
SSDEEP

768:ZhejY0oiP5tWiCDWEFOa3FjPLV6PCNDBoHR0Scp6r71Yp6aeYrm:CjY0oiPDwCHaFL8CNSE8rJY8Qrm

Score

N/A

Malware Config

Signatures

Files

d6859ff98f04ec3945254288a89b20103887df66c0327611cf8812bbcb8d6092
.exe windows x86

32ca8d5fca836efa8536566f0eee05c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA

Sections

BitArts
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE