83c9f7cbfa25ae5dd0ba61ca5bee6db06695c0f12266357df522dc6af17f41e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83c9f7cbfa25ae5dd0ba61ca5bee6db06695c0f12266357df522dc6af17f41e4
Size

76KB
MD5

0e30e2a2e3728331b48c7fbbc85d83ad
SHA1

c7c0a9d1ec7d7db836f7a66492d84cec22538078
SHA256

83c9f7cbfa25ae5dd0ba61ca5bee6db06695c0f12266357df522dc6af17f41e4
SHA512

8e81e3bf186b30c38e7049e44e7a0ffd983dda65219dee0e3f6863c4f5a14d5f21aa7644f691f414d753ad8ebc94ed5f8e05d5b8572aa5fb7a7a82cb1378cf0a
SSDEEP

1536:okLoKj6gDnqy3KfKz86JEm2eQhPS5xyQ7pjVrs2ryrd1vUQuq6:oYoKj6gDr6f8DE6QCB7Hs2qo

Score

N/A

Malware Config

Signatures

Files

83c9f7cbfa25ae5dd0ba61ca5bee6db06695c0f12266357df522dc6af17f41e4
.exe windows x86

0808df0c2b913ea01c52b0189db055fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWowExec
DefineDosDeviceA
GetSystemWow64DirectoryA
GetVolumePathNamesForVolumeNameW
GetVolumePathNameW
ZombifyActCtx
FindNextFileW
SetConsoleCP
DeleteFileW
SetConsoleCommandHistoryMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE