d9a8b5ab67cc6e90e5bfaca2c473f6734eb419108e1e106cc5e2d81d6984b13d[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9a8b5ab67cc6e90e5bfaca2c473f6734eb419108e1e106cc5e2d81d6984b13d.exe
Size

6KB
MD5

3c18300c8d61d2759783765c03a392cd
SHA1

e58af232a59abe0878610bf57bafa50b95bdde5d
SHA256

d9a8b5ab67cc6e90e5bfaca2c473f6734eb419108e1e106cc5e2d81d6984b13d
SHA512

f3dadc2c3d47dc182db3fca2928deb0f2201bb1ae100534df4380a211d42a9c9a9f89aab00ed872ffcbba895b64a81ec277a4a2ffb6c42d89487f2cf2ab78ed8
SSDEEP

192:SysmQMKsfVEtKnKfzbDXwLTbh9nNXfnJynq:SwKmVBKfzvsHyq

Score

N/A

Malware Config

Signatures

Files

d9a8b5ab67cc6e90e5bfaca2c473f6734eb419108e1e106cc5e2d81d6984b13d.exe
.exe windows x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ