f9d733001d81d998b0808090e0aecceac8d88824e2ec8d37e24d29cb323ee46b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9d733001d81d998b0808090e0aecceac8d88824e2ec8d37e24d29cb323ee46b
Size

122KB
MD5

7881717f9cd563f668990b1e6030f7ed
SHA1

728fe28b193c03a6e536990ae895ea93815192e0
SHA256

f9d733001d81d998b0808090e0aecceac8d88824e2ec8d37e24d29cb323ee46b
SHA512

a783ad801019d48d7f22e42b1f73095dc57d276237f720e90155e19b95987852776186a047fa035e667e769923d91a20fb76dce22538e83d75f21c6b4f835e7e
SSDEEP

3072:xcLngZXTHsRrbXLYsEDImf06IZ5TbqF5:HjMR3LHbNZ5TO

Score

N/A

Malware Config

Signatures

Files

f9d733001d81d998b0808090e0aecceac8d88824e2ec8d37e24d29cb323ee46b
.exe windows x86

fddfb798fb9b11ce038efebafb3dd03e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
GetCommandLineW
GetModuleHandleW
lstrcmpA
lstrcmpiW
GetProcessHeap
Sleep
GetLastError
VirtualProtectEx
GetCurrentProcessId
GlobalUnlock
ExitProcess
IsDBCSLeadByte
LCMapStringA
IsBadWritePtr
GetVersion
lstrcpynA
GetFileAttributesA
GetProcAddress
SetStdHandle

msvcrt

__set_app_type
calloc
_except_handler3
_initterm
__p__fmode
__p___initenv
free
__setusermatherr
__p__commode
_controlfp
__getmainargs
_adjust_fdiv
_XcptFilter
_exit

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.)data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE