dcf9d8af90ed47f5e1e8968cea505bfc0aae62dfea27f3be1c33accaf0eb1925 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcf9d8af90ed47f5e1e8968cea505bfc0aae62dfea27f3be1c33accaf0eb1925
Size

94KB
MD5

76886084c7b5a41d781a1dfa8dd63e91
SHA1

402bd12635dac9099a6a0dff5eb6551dbb5f50e9
SHA256

dcf9d8af90ed47f5e1e8968cea505bfc0aae62dfea27f3be1c33accaf0eb1925
SHA512

59ad4f0cd85f0947d4f840815056170649c8320ecdb7573819cdf1fb343530a22d3cb3f96c04991c448858bce29cb90d509e1a7d4549b4c082957c94db9ecc6c
SSDEEP

1536:bnufHsTYfIQpekf9iXnDXyTUn3Ckuh4n4NngMTHnwjuJVc4EFxVNrAa0Z+:bnufHsTYfZGXaI3yh4n4N5wjSfGyZ

Score

N/A

Malware Config

Signatures

Files

dcf9d8af90ed47f5e1e8968cea505bfc0aae62dfea27f3be1c33accaf0eb1925
.exe windows x86

e6229297ed34f24996ced0978470e3cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreW
OpenEventW
ReadConsoleOutputAttribute
GetComPlusPackageInstallStatus
LZStart
EnumSystemLocalesA
LZCopy
ResetWriteWatch
InitializeSListHead
CreateProcessW
WaitForSingleObjectEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ani
Size: 37KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE