9c80d2b6fa3329d654f8db39eebc88173570434339955041910db2800facb604 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c80d2b6fa3329d654f8db39eebc88173570434339955041910db2800facb604
Size

76KB
MD5

90d0194e22e81de02f6a53c59c88ed14
SHA1

796b8a75db62dbb2fdfc98f31e74217045712aa6
SHA256

9c80d2b6fa3329d654f8db39eebc88173570434339955041910db2800facb604
SHA512

f15bfcb1acda0acdc04d6b89b1d0472c76666baac39132785095aff3f2cd39508086c195b2a3becdca61f308a2bb5d124be3ab83c346d5f00052f86c073db5c9
SSDEEP

1536:nsoGifOaVt4jgKlfo8K5mgPxZe+MQMzpjVrs2ryrd1vUQuq6:nff/4jgKldcmUq+MQaHs2qo

Score

N/A

Malware Config

Signatures

Files

9c80d2b6fa3329d654f8db39eebc88173570434339955041910db2800facb604
.exe windows x86

ad8b13001e1e4e6295edb0d21cee7996

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFile
GetLinguistLangSize
LocalAlloc
GetCPInfoExW
ExpungeConsoleCommandHistoryW
GetNumaHighestNodeNumber
EraseTape
MoveFileWithProgressW
BeginUpdateResourceA
FlushViewOfFile
LocalCompact

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE