6d495d193199a9f6bc6ce7959be77d094089a69f62d6137a6d1ce04b6abd151e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d495d193199a9f6bc6ce7959be77d094089a69f62d6137a6d1ce04b6abd151e
Size

181KB
MD5

0943eca5aae3d297ad0ec7b52a7e73b0
SHA1

840ccd4e541523098ad520a8f2d67edccf3a484e
SHA256

6d495d193199a9f6bc6ce7959be77d094089a69f62d6137a6d1ce04b6abd151e
SHA512

02393670045fdd21295a507b6478afc1d76d6f24612fe4d202b3fc80d6b617b4856e5fbd08cb9c3106999915a24ec8ae5559aad7b6ea9f8d699ea8aa48be6ba8
SSDEEP

3072:uoL9Nwt8wJGy4XcB6YbZIqfGpLUY1EeSRk4NZUdN/xa12XS7653k+97bu:uU9E8wJGvXc8YbuqfG396idDa1OD53kj

Score

N/A

Malware Config

Signatures

Files

6d495d193199a9f6bc6ce7959be77d094089a69f62d6137a6d1ce04b6abd151e
.exe windows x86

a682f29f10f5b002a56c3d14a46f7b36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
ReadConsoleOutputA
SetCalendarInfoW
lstrcmpiA
LCMapStringW
GetModuleHandleA
RtlUnwind
TerminateThread
WriteConsoleInputA
Module32NextW
LocalReAlloc
QueryPerformanceCounter
GetTimeZoneInformation
GetCurrentProcess
SetConsoleIcon
CreateMailslotW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE