9420547d0a61579a6be2e850c9321a2e05ee64417151540dd10a72c8bb79dd5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9420547d0a61579a6be2e850c9321a2e05ee64417151540dd10a72c8bb79dd5d
Size

168KB
MD5

4bb9260fe8b1cf120152500165974f27
SHA1

b1acac2f26dbf9c6c0e0f5d86dd3c8ced845915a
SHA256

9420547d0a61579a6be2e850c9321a2e05ee64417151540dd10a72c8bb79dd5d
SHA512

9ff9945f5013f92401fe83935ddca449156114d48bad11f199e92cc4ca9274b066b3f377bd56c10ee05c7d7563710b15bd47f9783ed97dc99144b2ebb72b0668
SSDEEP

3072:KXZKOWzSjHI8IZYoiBrSC1dJDpw+JAWSsDc081xNDBpLW35d6:nO1o83tSudJllJlSsIRzN/C3r

Score

N/A

Malware Config

Signatures

Files

9420547d0a61579a6be2e850c9321a2e05ee64417151540dd10a72c8bb79dd5d
.exe windows x86

4cff1a15df07e0339a01075fa71cd0a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
DeleteCriticalSection
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetOEMCP
GetProcAddress
HeapFree
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
LocalAlloc
VirtualAlloc
lstrlenA

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ