9887612bb8156f6033d9ea082d457cfec61e992fcb5c2994be38e7468d196c42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9887612bb8156f6033d9ea082d457cfec61e992fcb5c2994be38e7468d196c42
Size

56KB
MD5

e3ef620a41bdc0ccb7593a1b62d19f96
SHA1

a641ee90e124a45da14bdfe412084143bc18f9a4
SHA256

9887612bb8156f6033d9ea082d457cfec61e992fcb5c2994be38e7468d196c42
SHA512

dffa62640451ef6eb94725737fb56ec364f40c5ad9f268fa5b8ea7d9302c09bbdc36bcb3b94128e23f2c61cf8de70ab1cc3c15f321439bf0c22194a67e2e95bc
SSDEEP

1536:jbobvCDfn84OIj192sVmg7LNPiCMLklv5qWlT:HgGn84f192sVvMCMQR5/

Score

N/A

Malware Config

Signatures

Files

9887612bb8156f6033d9ea082d457cfec61e992fcb5c2994be38e7468d196c42
.exe windows x86

e6739c391ad2444b813ea9c2f217984a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateTimerQueueTimer
SetDefaultCommConfigW
CreateTapePartition
NlsResetProcessLocale
GetProfileStringA
ExitVDM
AllocConsole
ReleaseSemaphore
LZOpenFileA
SetProcessShutdownParameters
GetProcessId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE