c9349a5ce6027c77957be9c60d1820c93b4cd56f445edb73b51338eeb7a72ebe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9349a5ce6027c77957be9c60d1820c93b4cd56f445edb73b51338eeb7a72ebe
Size

49KB
MD5

038b96d4453b1b20d065199e60178484
SHA1

53cbaaa5d9b5054a642fc37ac23c48b9afb5973b
SHA256

c9349a5ce6027c77957be9c60d1820c93b4cd56f445edb73b51338eeb7a72ebe
SHA512

d76bb984cb3a1bae8147900683f931a04c355327b22b312482655e5227cae6d49e52593f3fc8d839937b8b7ac3a5edc9e285b5b050d0a8a11311464eec1b8e85
SSDEEP

1536:NgVfyLyCWhj2UOaRz77XHlpqcWlpx19fDa733E:NgQLrWhj2UOad77Vpolpx19r

Score

N/A

Malware Config

Signatures

Files

c9349a5ce6027c77957be9c60d1820c93b4cd56f445edb73b51338eeb7a72ebe
.exe windows x86

3788788bbd44daeed4cc543e53314a1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
CreateThread
EnumDateFormatsA
ExitProcess
ExitThread
GetFileSize
GetLastError
GetModuleHandleA
SetEvent
Sleep
VirtualProtect
WaitForSingleObject

user32

MessageBoxA

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE