9fcd668b2726f02428000738a4cd14e7269dae30b095160e05d4da4793cfff5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fcd668b2726f02428000738a4cd14e7269dae30b095160e05d4da4793cfff5f
Size

91KB
MD5

96f400c5969680819f489847da69f920
SHA1

d2e3f3c46035e6548965991299593207078a4bd3
SHA256

9fcd668b2726f02428000738a4cd14e7269dae30b095160e05d4da4793cfff5f
SHA512

e37a7ff7ae1de4b0f17376828ef34c3b9398961ebf340be959c034412263fac9c32d26075012653bb9b5e36bda5a48bdb2c844ef67c47c2a38cc00c99665efa3
SSDEEP

1536:gDg8dX+N5g1AsMeXtmjcPSz6TgnMiztZ3Y1SKo4gQ6Zw5:gEIOHg1nXtmjWSz6hi7ufo06m5

Score

N/A

Malware Config

Signatures

Files

9fcd668b2726f02428000738a4cd14e7269dae30b095160e05d4da4793cfff5f
.exe windows x86

b220fd3954a676aa1c290625e928fce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
VirtualProtect
VirtualAlloc
VirtualFree
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
lstrcmpiA
LoadLibraryA
GetModuleHandleW
HeapAlloc
GetOEMCP
GetACP
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetCPInfo
GetStringTypeW

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ