f6bd63885aceb7afeb6e38d39c911026cd76c3e00b388da1b38508035df9bdfa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6bd63885aceb7afeb6e38d39c911026cd76c3e00b388da1b38508035df9bdfa
Size

11KB
MD5

68527c20b7ddc94516929748f0a9ede0
SHA1

819ac4bea42b1f89c147fed0cd65e66878344204
SHA256

f6bd63885aceb7afeb6e38d39c911026cd76c3e00b388da1b38508035df9bdfa
SHA512

fbc01a514e818f33e13ba6ea12ed7f8eff0c4d90271b1f57a5291be2f9998cd1c8293e234f116eb8d991cc77d93d540625b6eb35b8c958d8ce83c5e112cd13cd
SSDEEP

192:7sOdvxcZQVxaM5d/Fyexb0Nm9m9cbmjfo:jkZQ/Zd/kexPmW4fo

Score

N/A

Malware Config

Signatures

Files

f6bd63885aceb7afeb6e38d39c911026cd76c3e00b388da1b38508035df9bdfa
.dll windows x86

091ac15ca47e0abe62045038821dfa5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
GetEnvironmentVariableA
GetFileSize
GetProcAddress
LoadLibraryA
MoveFileA
ReadFile
Sleep
VirtualAlloc
WriteFile
lstrcatA
lstrcpyA
lstrlenA

Exports

Exports

LoadBitmapA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ