c9aa8a4cd98fcd65dd8321cf4719f6fa64d928dfb5958f6ec6560375d97788de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9aa8a4cd98fcd65dd8321cf4719f6fa64d928dfb5958f6ec6560375d97788de
Size

42KB
MD5

163cd9b2ce78cb14532500bd029fc81f
SHA1

9ee0255d665f41c49c79c70bad518364e266a50f
SHA256

c9aa8a4cd98fcd65dd8321cf4719f6fa64d928dfb5958f6ec6560375d97788de
SHA512

b7c9208e6f2ae7e01b8339b9280aee54d275f70f92ecb24493c9b7e4f2e745bf78ceac234398cd9fd88c6dcd850cf46893f9fa8d96035b6c78ed3c02736991fb
SSDEEP

768:z5aGq0UhiMEQUR2K5OzSksr1vX4ex3Hcll2jh4Hycq1o9+s:tVq0GGR5sSNr5FMll2N4SPon

Score

N/A

Malware Config

Signatures

Files

c9aa8a4cd98fcd65dd8321cf4719f6fa64d928dfb5958f6ec6560375d97788de
.dll windows x86

2ec2bab46642aa0c25c3fe741dca8b7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetCurrentThreadId
GetTickCount
LCMapStringW
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
RtlUnwind

user32

MessageBoxA
GetSystemMetrics
SendMessageA
GetUpdateRect
GetProcessWindowStation
wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ