9b69129f73e1782939f265d93125dba74334e9f44580d48a47e49a9582ca92a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b69129f73e1782939f265d93125dba74334e9f44580d48a47e49a9582ca92a2
Size

75KB
MD5

c073fd04ea4a3e88201f6b2905465bc5
SHA1

434a9889cecf2315629ec0ea30f9c8047f5394fb
SHA256

9b69129f73e1782939f265d93125dba74334e9f44580d48a47e49a9582ca92a2
SHA512

928465a0fa6295ec38b1d60736a89487d68385b0738f1b442789b2fbf9cbdec963a02d576c4a21b17a6b06550d1a1c2192787fc815e6bdcdb8b540573ca4452a
SSDEEP

1536:+j8d0xHjiifOBqvUlEhHJ3t4yhOUvwrOSUN9PXKQJBV3L+lfDTw:+j8d0BiifO+hHJ3JhOUvwrhUN9Pa4Bkw

Score

N/A

Malware Config

Signatures

Files

9b69129f73e1782939f265d93125dba74334e9f44580d48a47e49a9582ca92a2
.exe windows x86

8d1f3607f6f644aa45436b6badedcfb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualAllocEx
VirtualFree
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE