9e934c4e912d51635efa6be457e00b9d23fb468ce33dd2a54ad1564eb7485607 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e934c4e912d51635efa6be457e00b9d23fb468ce33dd2a54ad1564eb7485607
Size

32KB
MD5

660b20ed79fb504595d8da69f8365fc0
SHA1

857009aec74adde9caa87d4e6a86a6ed228c9724
SHA256

9e934c4e912d51635efa6be457e00b9d23fb468ce33dd2a54ad1564eb7485607
SHA512

d0c353fa45bb14eff7395a63add600c9cdbc7e151a7ee89db1efb0ad7e20863f7acde0f95fd54b690281e4c5beaf53135ac3c89e19ad9352d9301aa3f6384fe7
SSDEEP

768:YfSSTz9BpfmP6YMGGHgwEvjL+1jR+sX2vPTXn:KXzDpmeAw4jSnGvPr

Score

N/A

Malware Config

Signatures

Files

9e934c4e912d51635efa6be457e00b9d23fb468ce33dd2a54ad1564eb7485607
.exe windows x86

a1461efa6059dc6e158f18504743c166

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
PostMessageA
SendMessageA
BeginPaint
EndPaint
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
LoadCursorA
RegisterClassExA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
DispatchMessageA

kernel32

DeviceIoControl
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CreateFileA
ReadFile
FileTimeToSystemTime
GetFullPathNameA
LoadLibraryA
CreateDirectoryA
TlsGetValue
GetProcessHeap
IsValidCodePage
SetEnvironmentVariableA

wtsapi32

WTSEnumerateProcessesA
WTSEnumerateServersA
WTSLogoffSession
WTSQuerySessionInformationA
WTSSetSessionInformationA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ