5c9a71bfcb80d887c624a2cd27c0e79ade7002ff69656b9475bb0d131199ffb3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c9a71bfcb80d887c624a2cd27c0e79ade7002ff69656b9475bb0d131199ffb3
Size

103KB
MD5

280f8a3e81e7436f37dea4d1a89acc90
SHA1

a6542b4647972fa7bcf8509e81c55088da0a0b66
SHA256

5c9a71bfcb80d887c624a2cd27c0e79ade7002ff69656b9475bb0d131199ffb3
SHA512

41e87d1d4a32501ab902cef71d04f6696683637d2bbaa0497f148731b9784eb589f598074b6f6c9a4d3e4d44617a57a38b7322b70d3c29916075e42533f4b8c9
SSDEEP

1536:Gtk2pWXaSQRwnDUo1jwTeDGY/6Xgi6V9Z249939M4Qgn0a+YqKNhnPBfAv34qO:Gtk2pWXMoJlGYDzpt10rhKH5fkk

Score

N/A

Malware Config

Signatures

Files

5c9a71bfcb80d887c624a2cd27c0e79ade7002ff69656b9475bb0d131199ffb3
.exe windows x86

0e15e6f008f719d9f61273abc05d0abb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
RegisterConsoleIME
RegisterConsoleVDM
QueryInformationJobObject
DebugSetProcessKillOnExit
CreateProcessA
ExitThread
VerifyConsoleIoHandle
WritePrivateProfileStructW
Process32First

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 89KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE