d9ab22a7ee44ec2cd63ece58d7174d4394a2be6a31bd3529d1c9a17272979b86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9ab22a7ee44ec2cd63ece58d7174d4394a2be6a31bd3529d1c9a17272979b86
Size

134KB
MD5

08630dce2b571279f380e1be03ced930
SHA1

9a9889eff875cf741cb47ab7127c24a56da0b2bf
SHA256

d9ab22a7ee44ec2cd63ece58d7174d4394a2be6a31bd3529d1c9a17272979b86
SHA512

badfd511fbdc9985bf87d966a0a601cc967d00e87a501c10090c296d6f7268894bd1b70cb5fef00f66abf42d63722bae623d577e532976cf86fb868f02c286c1
SSDEEP

3072:fpPptUYXwAZ0qUDTXecsCpexqNTqnWe/:fpPptUYXwAZ0q2x3ZOW

Score

N/A

Malware Config

Signatures

Files

d9ab22a7ee44ec2cd63ece58d7174d4394a2be6a31bd3529d1c9a17272979b86
.exe windows x86

31ea0af0355be10a85ab0d45b89fa949

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetProcessVersion
lstrcpyA
CreateIoCompletionPort
FindFirstVolumeMountPointW
TlsGetValue
UpdateResourceA
SetLocalTime
WriteFileEx
CreateDirectoryW
GetPrivateProfileStructA
WaitCommEvent
GetDiskFreeSpaceExW
FindClose
SetProcessWorkingSetSize
SetSystemTime
GetBinaryTypeW
GetWriteWatch
LocalFlags
CreateSemaphoreW
PostQueuedCompletionStatus
CompareStringW
SizeofResource
GetCalendarInfoA
OpenEventW
ChangeTimerQueueTimer
CreateEventA
GlobalUnWire
CreateMutexW
GetThreadSelectorEntry
WaitForMultipleObjects
GetCurrencyFormatA
CreateMailslotW
IsSystemResumeAutomatic
GetSystemInfo
SwitchToThread
OutputDebugStringW

user32

DefWindowProcW
ExcludeUpdateRgn
ChildWindowFromPoint

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE