c9aa3b45d905d3502c117122ffc096b664a4e181da1a51804ac0903509ac59c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9aa3b45d905d3502c117122ffc096b664a4e181da1a51804ac0903509ac59c4
Size

108KB
MD5

076df63a04560ddb9b749ab977075c36
SHA1

66c5b0b7de91f19c707738cd1ff80ddc74e30b87
SHA256

c9aa3b45d905d3502c117122ffc096b664a4e181da1a51804ac0903509ac59c4
SHA512

c7915a79663e036200235328a7a71b93f4564ac721f33461a449557a2bc2d45a3cb28a55e86a0825098c801c2bc248d336fdd384dc6e84c8433a562287f8b730
SSDEEP

1536:n9MfW/NoB3H2A7D9Jy8czZItF7HkZa3AD8GXN+I7fJ+aCl1feBAc:nGfWVoB3H2Avy8i2tNHIDzoI7h+aS1Gn

Score

N/A

Malware Config

Signatures

Files

c9aa3b45d905d3502c117122ffc096b664a4e181da1a51804ac0903509ac59c4
.exe windows x86

18539b446ef7059e7440cf56cdcecd88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CloseHandle

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE