9a4f08a4a90190c141ba449af8cf46b74bcf23deb75e70264e2ba18f98279ac7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a4f08a4a90190c141ba449af8cf46b74bcf23deb75e70264e2ba18f98279ac7
Size

76KB
MD5

6e9ffa85c7e633d023b3ad8c0acecc70
SHA1

36d9d7a45772a4c693271eeedd0248a2098d806c
SHA256

9a4f08a4a90190c141ba449af8cf46b74bcf23deb75e70264e2ba18f98279ac7
SHA512

7918037acf72184cbacb4d7ef77bf31c665338e59a3e1646ff7db409698db4645ce8bfdea46cdba9797cf7b615d5acbff41a7a92b652724a5f14137876b66dac
SSDEEP

1536:HLzfby3GiZVn+Cu+s+BQbIJkxDs4VloJk2ohAOmnbUhJjEErxTWDTMqhGKYIZTEM:HLzm3PZVnPsAQyuDsK0kywvjBkMqhGKn

Score

N/A

Malware Config

Signatures

Files

9a4f08a4a90190c141ba449af8cf46b74bcf23deb75e70264e2ba18f98279ac7
.exe windows x86

421e323ccbf3522277abb9235d7573b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
WaitNamedPipeW
IsProcessInJob
GetCurrentThreadId
DecodePointer
WriteConsoleOutputAttribute
OpenDataFile
SetConsoleIcon
GetEnvironmentVariableW
WritePrivateProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE