c9c9b89622432fd4cdb82dc0b73f009f870775ef15d99e5c3a125a5e493f7d73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9c9b89622432fd4cdb82dc0b73f009f870775ef15d99e5c3a125a5e493f7d73
Size

320KB
MD5

a12dffd428d46d338a836b281a5054b0
SHA1

dcb605c388810ef1bf672c8bf1fc7bf9351b55ac
SHA256

c9c9b89622432fd4cdb82dc0b73f009f870775ef15d99e5c3a125a5e493f7d73
SHA512

d2afcf066a6b30a35f769b1a87fb92d092addd1ad853ae6212fea0910d59b998456b5573e62c261223ae6672d8fa5e0e18d4bb80ad871e748235ab03cbe6c652
SSDEEP

6144:AhZKZCH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:UZKZA2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

c9c9b89622432fd4cdb82dc0b73f009f870775ef15d99e5c3a125a5e493f7d73
.exe windows x86

a1ccdda22e914d723acbb39286c3ab13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32First
WriteProfileStringA
GetCompressedFileSizeW
CheckRemoteDebuggerPresent
RtlCaptureStackBackTrace
GetProcessShutdownParameters
RemoveLocalAlternateComputerNameW
FindNextFileA
Module32Next

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE