6999ad197131861dbeb735b0ce6eb001708223da742d6c6d284ca605e35f5eda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6999ad197131861dbeb735b0ce6eb001708223da742d6c6d284ca605e35f5eda
Size

56KB
MD5

f4b31b4d82ddb8d8e3f8e6592aa9607d
SHA1

387efa412c01154278d79cfb73f027e41e3f0abe
SHA256

6999ad197131861dbeb735b0ce6eb001708223da742d6c6d284ca605e35f5eda
SHA512

104855570185b0412fd2bc7c4e477512cd924becdbba04de3aa0cab4fc56a45b10f767345a6f8659c812877cdcd1e6d9600d99e17a779a58a596662c3b072d1b
SSDEEP

1536:kq6uZ4kkcDqISJqmbM70vkzWi2/TpR0Wm:TTZ4mqIETM70vkqNI

Score

N/A

Malware Config

Signatures

Files

6999ad197131861dbeb735b0ce6eb001708223da742d6c6d284ca605e35f5eda
.exe windows x86

9ba6843cb679224d2431325f589e00e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NumaVirtualQueryNode
GetTimeFormatA
AddConsoleAliasW
DeleteTimerQueue
MapUserPhysicalPages
DeleteCriticalSection
GetTempFileNameA
SetComPlusPackageInstallStatus
CreateEventW
SetTapePosition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE