9c8aa37689e8fd2a36e79ca5a395abf6c5a45bcb3779b8e8fa9be76bc169b2af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c8aa37689e8fd2a36e79ca5a395abf6c5a45bcb3779b8e8fa9be76bc169b2af
Size

56KB
MD5

0f13da429dc5f2a7ca57d070d4cc5853
SHA1

e2064cefdf87656c595950e5ec727240704fa9a5
SHA256

9c8aa37689e8fd2a36e79ca5a395abf6c5a45bcb3779b8e8fa9be76bc169b2af
SHA512

0691e88ed4758fd69b9ed1b8b5afd113964db45b1cb04f3d6f531e93e41c04d3c38cdac1675641667cc75633df655900ea2626e5c57e1772051849c23f97f4e6
SSDEEP

1536:ZZ/rIPDkbNSnwJyK1MUNBXF0y6hRoonCRYbn:ZZ/rIPDUNSnnKeUd0yyqiLD

Score

N/A

Malware Config

Signatures

Files

9c8aa37689e8fd2a36e79ca5a395abf6c5a45bcb3779b8e8fa9be76bc169b2af
.exe windows x86

9493efba8efd1383e3b858faa268ae3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreatePipe
FindNextVolumeMountPointA
DebugBreakProcess
SetDllDirectoryA
CreateEventA
ReplaceFile
GetTapeParameters
DeleteCriticalSection
GetPrivateProfileStructA
SleepEx
LoadLibraryExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE