e9bc6c62f67f892e3f07b6a57884b82b25a504e111837dad07facaafe2e514af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9bc6c62f67f892e3f07b6a57884b82b25a504e111837dad07facaafe2e514af
Size

88KB
MD5

4af4b51a4646826ceecebbb48e4141e1
SHA1

436fa7cb36f307812909114809b83e94d415db31
SHA256

e9bc6c62f67f892e3f07b6a57884b82b25a504e111837dad07facaafe2e514af
SHA512

a149acf507b8a65dfda12404c82afa3a1149b00f4543666f0e249abcebd101cdf20eaf3674e6d75bb1187386464e312a54cbd0055eec45c3e8d19671f4400e28
SSDEEP

1536:J9GvcnNcnGHagWcXOyKAh+ICWKVzwgoW32:JUctPKRoWG

Score

N/A

Malware Config

Signatures

Files

e9bc6c62f67f892e3f07b6a57884b82b25a504e111837dad07facaafe2e514af
.exe windows x86

28aac8e6d8b7fc104465b2f9ce13db95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
GetThreadContext
Sleep
SetStdHandle
ReadFile
SetFilePointer
FlushFileBuffers
GetLastError
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
CloseHandle

user32

GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
PeekMessageA

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ