b9dca133500336720634bf9dd665fb025276d0e770a4de1885ee893938bc0f93 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9dca133500336720634bf9dd665fb025276d0e770a4de1885ee893938bc0f93
Size

63KB
MD5

60baf69181959677129ab0caee215829
SHA1

128d882f313c79b3cea4e993c0b79a9b11ddd01a
SHA256

b9dca133500336720634bf9dd665fb025276d0e770a4de1885ee893938bc0f93
SHA512

53ffb3e456386bd26ddfc9fe9d5b35fd461d1a34c91d5f6cdeb80193e71db0c5359e1fef044fa73c0b50791051f6031658b9d076be5a939ce817dc3d5f6c11f9
SSDEEP

1536:JhTmM6RcNC+qTBilORoFLFTNc2G7Xtd9JV3SO1UEgCIHXMw:rggqTBiuehn6tPTp1UII3Mw

Score

N/A

Malware Config

Signatures

Files

b9dca133500336720634bf9dd665fb025276d0e770a4de1885ee893938bc0f93
.exe windows x86

76032e9343c777756bf9f27a9d09c99a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
Thread32First
GetExitCodeThread
EndUpdateResourceW
GetHandleInformation
DeleteVolumeMountPointW
QueueUserAPC
GetProcessShutdownParameters
ReplaceFileA
DeleteFiber
DnsHostnameToComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE