a9703fe956384594a10ca69035a8fae8f5bbdc72f9119fd03eba433e459d2d9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9703fe956384594a10ca69035a8fae8f5bbdc72f9119fd03eba433e459d2d9a
Size

56KB
MD5

4d2c008c9c036501ccc0cb89241ca5b0
SHA1

60a4936d6dfdb19a8afceab362c1622098d3ff4b
SHA256

a9703fe956384594a10ca69035a8fae8f5bbdc72f9119fd03eba433e459d2d9a
SHA512

30a418669f048732a5a308a1101b887327f2a7e2481cb4d8b2d7d4e2efe3d25612af4b51ae63c11b2408ef5db41755f5ac9e563ef56df46f3d42437d6f8f3912
SSDEEP

768:EpfjnyW14doRQe6jMQh7U+4Doiguvx4sezCtg9GJBNlPlxWb2IRJhk9f9XN4rxry:qfTyL4DtusewWwwSYvyOrXLSvd5

Score

N/A

Malware Config

Signatures

Files

a9703fe956384594a10ca69035a8fae8f5bbdc72f9119fd03eba433e459d2d9a
.exe windows x86

ec4b52fbffbce35a56b88c3804a8e429

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputW
IsDebuggerPresent
FindVolumeClose
WaitNamedPipeA
GetOverlappedResult
WriteConsoleInputVDMW
ReplaceFileA
GlobalAlloc
lstrcat
GetStringTypeExA
SetConsoleMode
FindResourceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE