9bc8fda007bc39b8ea6c54d0bf6d15795f4431c692d119603f7aff1495239ca3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bc8fda007bc39b8ea6c54d0bf6d15795f4431c692d119603f7aff1495239ca3
Size

119KB
MD5

112b439d1960cb29b26de4cfdbe927f4
SHA1

b0e4a70d338d1141557a7bccfa2ac779a91a36dd
SHA256

9bc8fda007bc39b8ea6c54d0bf6d15795f4431c692d119603f7aff1495239ca3
SHA512

2c02c50a48801ebdef90a7f6bdbe8e695448f717ecd8557eeaa59aecf80a914a7254e1ac3b761cf4aaf080c54720ddf24e3193b84e343625489b1d4907f0285a
SSDEEP

1536:GhBYAqDjAYNbmS2xIXMocHtXyXdMaBWjmUipjVrs2ryrd1vUQuqSSqK5tnCvv:fTiS2uXVbBWjmTHs2qxnC

Score

N/A

Malware Config

Signatures

Files

9bc8fda007bc39b8ea6c54d0bf6d15795f4431c692d119603f7aff1495239ca3
.exe windows x86

eccd12023df0b3aa3198e6aae958c2ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
CreateThread
FindNextVolumeW
GetCommandLineA
WriteFile
GlobalWire
GetExitCodeThread
RegisterConsoleVDM
SetEvent
SetConsoleCtrlHandler
DisconnectNamedPipe
VerLanguageNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE