f99925ef44fd8c98a0f00605814ad57eddaa6180d42e6ad15c54e2a0550f57bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f99925ef44fd8c98a0f00605814ad57eddaa6180d42e6ad15c54e2a0550f57bf
Size

303KB
MD5

9b053fb4c8f8c2ace5382e49b850e950
SHA1

f37410cc0fb4d25f2318d2392cadd068ee9553b2
SHA256

f99925ef44fd8c98a0f00605814ad57eddaa6180d42e6ad15c54e2a0550f57bf
SHA512

efe82a90ab6aba6bb1643f52ef9d325c42a65e5b75aa4fde13c5f6a8cd3a9c4421ab3c23c65d49f97ccc114cb4f47948cfd4dcccecc1f9c01becffba840f1e5a
SSDEEP

6144:R6a4cag/W6Ad1awwrcvYI3hcLk5AoiwhyyMaaxKG8XgtSW0:R6a6V1jAcv/ROY5isG84

Score

N/A

Malware Config

Signatures

Files

f99925ef44fd8c98a0f00605814ad57eddaa6180d42e6ad15c54e2a0550f57bf
.exe windows x86

f40d6eb9903677a90eb29d3c760628ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameW
lstrcatA
SetEnvironmentVariableA
SetFilePointer
IsValidCodePage
DeleteFileW
HeapAlloc
GetModuleHandleW
GetStringTypeW
GetModuleHandleA
GetStringTypeW
GetExitCodeProcess
GetDriveTypeA
HeapCreate
GetConsoleTitleA
GetStdHandle
lstrcmpiA
DeleteFileW
GetLastError
DeleteFileW
GetVersion
HeapFree
GetTickCount

netshell

HrCreateDesktopIcon
HrLaunchConnection
DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataz
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rs
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE