9fcfca4da86ba4f6d3a1e08c3445768154fb6e5fa9c8dab515dbebf10db3d015 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fcfca4da86ba4f6d3a1e08c3445768154fb6e5fa9c8dab515dbebf10db3d015
Size

200KB
MD5

11102c41fb69bf41aaf20485a65add20
SHA1

4585a53becbb9d3f9336111589776b4c337fe971
SHA256

9fcfca4da86ba4f6d3a1e08c3445768154fb6e5fa9c8dab515dbebf10db3d015
SHA512

166c2e25a10fe2f97a92546d3f7e3fc0d7d86ecd04d9a0d37811db07f7e81271c5ff4c28cafe62f5ab1f560bb27312acf39fb72c1aa710192d50de6cf430b5d1
SSDEEP

6144:jCxIgCbejjkDjGXJ6XAXNRuwHf3+QYS392nlkrC4IIe:jdbujG+dRxP2qpze

Score

N/A

Malware Config

Signatures

Files

9fcfca4da86ba4f6d3a1e08c3445768154fb6e5fa9c8dab515dbebf10db3d015
.exe windows x86

ca5101ba73066a8cde02d19de5dfd54b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumValueA
RegOpenKeyA
RegSetValueExA

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 107KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nmlphej
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE