9c89d48165b359f156affabfff524352dcd2462aa1213c62c8fa8129042796cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c89d48165b359f156affabfff524352dcd2462aa1213c62c8fa8129042796cf
Size

320KB
MD5

00113b7d955a0ba350485328ae7bf030
SHA1

28a80f0b35dd5ad70ca4f28923b896fbceaf6a26
SHA256

9c89d48165b359f156affabfff524352dcd2462aa1213c62c8fa8129042796cf
SHA512

bc6e36c0038b7018bf4edb1461a012a61665f5ea12101de092375ad9550ec3387a3a0549e57ba766c048bfc979c67ff19f9cec3975621e05f7fecf1832457066
SSDEEP

6144:4VdRz2AXoWH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:QdRzmM2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

9c89d48165b359f156affabfff524352dcd2462aa1213c62c8fa8129042796cf
.exe windows x86

917036daf3cedc8197dce12538ac4adf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
QueueUserWorkItem
ValidateLCType
QueryInformationJobObject
CopyLZFile
VerSetConditionMask
EndUpdateResourceW
RemoveDirectoryW
VirtualAllocEx
Process32First
SetThreadPriorityBoost

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE