9b64f61902319bd7d24ff62fd2613fb16b55be17d08d457ad2355bdc9986375a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b64f61902319bd7d24ff62fd2613fb16b55be17d08d457ad2355bdc9986375a
Size

504KB
MD5

13795ad6b27becf10eaaf1116f5b01e0
SHA1

ec5541815bc4d6d51c30f8b1b5117e3a9b77838a
SHA256

9b64f61902319bd7d24ff62fd2613fb16b55be17d08d457ad2355bdc9986375a
SHA512

0088c9e5fd7640be35a7f82988bd22de07a83d5ec61ff12ccf92b9a5a0b1500746449d418642935d8c78e38cf66a9801b662d196ca034147c61a5478206db69b
SSDEEP

12288:7QcBiE7J2i18jAKg8vteexM/TSbV+qcq+eivznGnkWAQGqDLK9K:8M/Mw8vtee4TSbMXvzniAQGqD

Score

N/A

Malware Config

Signatures

Files

9b64f61902319bd7d24ff62fd2613fb16b55be17d08d457ad2355bdc9986375a
.exe windows x86

7e8d5505c07d58962a1034b804b3a9d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetDriveTypeA
HeapFree
GetLocalTime
SetEnvironmentVariableA
lstrcmpiA
SetLastError
GetLastError
GetExitCodeProcess
HeapCreate
GetStdHandle
GetShortPathNameW
GetConsoleTitleA
GetLogicalDrives
GetVersion
lstrcatW
TlsAlloc
GetTickCount
IsValidCodePage
SetPriorityClass
GetModuleHandleA
GetStringTypeW
SetFilePointer

netshell

DllCanUnloadNow
DllRegisterServer
HrLaunchConnection
DllGetClassObject

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 498KB - Virtual size: 1020KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE