9de67f2d24967eefbe1446dc7ce0a1e55c5a735067b49f60636ef2a02ade05a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9de67f2d24967eefbe1446dc7ce0a1e55c5a735067b49f60636ef2a02ade05a0
Size

63KB
MD5

6ff465ff25b94b84e7cc834eb7832528
SHA1

ffdca204e30ca5b6568d8a40c6ee7d985eff560f
SHA256

9de67f2d24967eefbe1446dc7ce0a1e55c5a735067b49f60636ef2a02ade05a0
SHA512

e23888c0d7773973aa89216604ac7bd97f325300ae6832bab5196feacb9e39c29d3d4534cb0da6b2f77af36fe3c0ec651271963ebfd5d0c32d3752d9b524d92f
SSDEEP

1536:xB4jxr+XNY+CQq0XSJA2ehqwqa9HPApqeJ2Pd:xB4jY6+CQ862eSUl

Score

N/A

Malware Config

Signatures

Files

9de67f2d24967eefbe1446dc7ce0a1e55c5a735067b49f60636ef2a02ade05a0
.exe windows x86

d4f187bc2f054d9678023fed107e134b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogA
GetVDMCurrentDirectories
GetVolumeNameForVolumeMountPointW
FindActCtxSectionGuid
CreateMailslotW
EscapeCommFunction
DebugActiveProcessStop
ExpandEnvironmentStringsW
VerSetConditionMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE