9f44ae805c1759af4f0e05428426ec8292360e4fe60dd8fe0745594440bc3754 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f44ae805c1759af4f0e05428426ec8292360e4fe60dd8fe0745594440bc3754
Size

63KB
MD5

648e83387bb62175df89197a836405f6
SHA1

49dc2bdce282db30a483604d71f3a86c3d7b614f
SHA256

9f44ae805c1759af4f0e05428426ec8292360e4fe60dd8fe0745594440bc3754
SHA512

d7c7e981e6145a244df67de21e32400c6a892f52b7520470bef727c5dd90cfdc6c6907311052e90ecd0ed5ffc09e18c972851cf831d7e51a28b6df9d5d8aa8a6
SSDEEP

1536:l/S3MdklMQkovyDZFJcS5e+Og3+t3ROfYwRBzmL7BJ7svv:laq2vksyDFcOOk6gYwRh+7svv

Score

N/A

Malware Config

Signatures

Files

9f44ae805c1759af4f0e05428426ec8292360e4fe60dd8fe0745594440bc3754
.exe windows x86

efd2d7dfd36fa60145864d2b6ade61b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualUnlock
CreateProcessInternalWSecure
EnumSystemLanguageGroupsA
LCMapStringA
EnumDateFormatsA
SearchPathA
ExpandEnvironmentStringsW
FatalAppExitW
EnumResourceTypesA
GetPrivateProfileSectionNamesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE