1a9cd864677927560b7ccc0d4d512a9ed37934f66e2223516660ef77cb59a41c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a9cd864677927560b7ccc0d4d512a9ed37934f66e2223516660ef77cb59a41c
Size

20.0MB
MD5

7c0358c3825052f082b7067d2c000aac
SHA1

439adf5e3cc4322ad5cbef0b063e9665335e3b96
SHA256

1a9cd864677927560b7ccc0d4d512a9ed37934f66e2223516660ef77cb59a41c
SHA512

6ebf2ec3841bb42eec32a3f81ca1114b37a0b7d2a725898c7a201e5abea68a18d2ab3fe96fc7eb70afa37a29d2724e9e3ba0a68c694738937cc05c5da8d82e01
SSDEEP

393216:+XxxFOmuCLmGCN/NpJICCLLmETJehpNKHodAHvfZPI6Xko3x3mDvV:+B7rmR/NpebmpcHoqx/b3x2DvV

Score

N/A

Malware Config

Signatures

Files

1a9cd864677927560b7ccc0d4d512a9ed37934f66e2223516660ef77cb59a41c
.exe windows x86

3525a20d57c512765c45d5be90fb5472

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
Sleep
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapFree
RaiseException
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
SetStdHandle
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ