9eb738d6f9d89de9f1ddf0d2e5442eaef288ce77a34314109b79495e89004047 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9eb738d6f9d89de9f1ddf0d2e5442eaef288ce77a34314109b79495e89004047
Size

306KB
MD5

43f0bcfd576671da33ebcacb3a0e583e
SHA1

b0dd1e2c05ba7218b80e3cfeaefe49a10b21253b
SHA256

9eb738d6f9d89de9f1ddf0d2e5442eaef288ce77a34314109b79495e89004047
SHA512

678fad3f4b1e235324f4e70ba10300f12744133d36b49e89a9675aca6eba223c1a5de4dae846c660a48d170053b1495e7b857a9850270b56a21616b685f1eb2b
SSDEEP

6144:rqFLhoWZTKRwnqLNmvkgaBLDyBpvDIJapbBF:rqFLhoST+YkjKaUBF

Score

N/A

Malware Config

Signatures

Files

9eb738d6f9d89de9f1ddf0d2e5442eaef288ce77a34314109b79495e89004047
.exe windows x86

581ab1ae5fd4205c1d4d145dd08501e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
WaitForMultipleObjects
GetEnvironmentVariableW
GetConsoleMode
GetStringTypeA
GetCurrentDirectoryA
ReadConsoleA
CloseHandle
ReleaseSemaphore
GetModuleHandleA
lstrcmpW
FindFirstVolumeA
CloseHandle
CreateSemaphoreA
FindNextVolumeA
GetFullPathNameA
CloseHandle
OpenMutexW
GetFileAttributesW
GetModuleHandleW
GetDiskFreeSpaceW
GetVolumePathNameA
GetFullPathNameA

certmgr

DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.pack
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE