9d70ff52fab881cb78211223a0ee463828a41cf18b480ba2595f08c6319090bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d70ff52fab881cb78211223a0ee463828a41cf18b480ba2595f08c6319090bb
Size

83KB
MD5

83bd84158996c3f0f48e90c06c54fabf
SHA1

513a2f5883d8430562948c6875272899ae4cf47f
SHA256

9d70ff52fab881cb78211223a0ee463828a41cf18b480ba2595f08c6319090bb
SHA512

e28f616b22c88586668dbcd580d8cea39b7851d412376afc1bd208bdff39e36e17943775f62e7d13688b389a3dd1ed771beb51c4aad596b91f0e05ba929526e9
SSDEEP

1536:Y0eolcClQKlFw5urhlHnKR7khKsITXYpjVrs2ryrd1vUQuqKsw:9e0cCiaFX90mLjHs2qm

Score

N/A

Malware Config

Signatures

Files

9d70ff52fab881cb78211223a0ee463828a41cf18b480ba2595f08c6319090bb
.exe windows x86

5a680c4149be74011d81d58d6235a88f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NlsGetCacheUpdateCount
DebugBreak
SetCPGlobal
GetEnvironmentStrings
SetConsoleCursorPosition
GetEnvironmentVariableW
TerminateThread
ReplaceFileA
LZOpenFileW
CmdBatNotification
GetCommandLineW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE