9b9580bb90c9bdce0e8da8aec0dce87fe76f445504eb5fdad3207ab2013a8db1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b9580bb90c9bdce0e8da8aec0dce87fe76f445504eb5fdad3207ab2013a8db1
Size

121KB
MD5

55c8d19c4b83eaa7cca61810387fdf90
SHA1

f809173dbdd3739e0ca06b33f78250a80fd941b1
SHA256

9b9580bb90c9bdce0e8da8aec0dce87fe76f445504eb5fdad3207ab2013a8db1
SHA512

89e4c7a2282ef82800c61b79b9886e61bc10d9ea1243b8133c737df5e8f400e1a480b75db2760d6019e157d6245061ff24139bc01332bcae1f3e0c59c76fecc2
SSDEEP

3072:96BbNSoBD6ks66766hVyasAsh1BYjdut3FAniSn71Z8:96dD862hVyasAsh1BU09FKxZ8

Score

N/A

Malware Config

Signatures

Files

9b9580bb90c9bdce0e8da8aec0dce87fe76f445504eb5fdad3207ab2013a8db1
.exe windows x86

7c82d453277b9a3fbadd85ab8aab06a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
GetPrivateProfileSectionA
GetLongPathNameW
lstrcmpiA
GetExitCodeProcess
SetEnvironmentVariableA
WaitForSingleObject
GetPrivateProfileIntW
GetDiskFreeSpaceW
InterlockedDecrement
InterlockedIncrement
GetFileAttributesA
LoadLibraryExA
Sleep
HeapCreate
WriteFileEx
Sleep
CreateDirectoryA
Sleep
GetPrivateProfileIntW
GetDiskFreeSpaceW
LoadLibraryA
lstrcmpA

catsrv

DllCanUnloadNow
GetCatalogCRMClerk
CreateComponentLibraryTS
OpenComponentLibraryTS

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE