6b78ed080d37e285c26a58122b3fde638c7a1b6c57a84c185259ad16b9b378d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b78ed080d37e285c26a58122b3fde638c7a1b6c57a84c185259ad16b9b378d9
Size

40KB
MD5

fc4a6453f3d1c02bfcb7eefa1beae7c3
SHA1

bfa6033150a5259510f64c5791111a178db09293
SHA256

6b78ed080d37e285c26a58122b3fde638c7a1b6c57a84c185259ad16b9b378d9
SHA512

5348903ee2e34b2feb4039e26009313525b03fae7f598edb64bf3b93524ab956ea368fe5ec613ecf47efad7c2613f44fdb930a4d6ca53f49a422317ed17dc449
SSDEEP

384:0NWutPyGe34iL1TvsSRh6b9DbbCV0DTyfaeRcWS9H7auWoa+Y:QWut6LdvsSc9WVUC1Rupazoa

Score

N/A

Malware Config

Signatures

Files

6b78ed080d37e285c26a58122b3fde638c7a1b6c57a84c185259ad16b9b378d9
.exe windows x86

d3ed65dc41699f2f65a2cd931c7b9377

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
OpenMutexA
GetTickCount
GetProcAddress
GetModuleHandleA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetStdHandle
GetStringTypeW
GetStringTypeA
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
CloseHandle
UnhandledExceptionFilter
LCMapStringW
WriteFile
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
RtlUnwind
GetLastError
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA

user32

FindWindowA
MessageBoxA
SendMessageA
PostMessageA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE