f9980ec6e4ebcb91d625b829900a2872cd0598ba210922ca8d2e3d6bb575a6e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9980ec6e4ebcb91d625b829900a2872cd0598ba210922ca8d2e3d6bb575a6e4
Size

68KB
MD5

7bb17d766ca4759b2feb13f421ffc459
SHA1

25ce3b9ff69a347b9e9297c1f2efcc52012d38da
SHA256

f9980ec6e4ebcb91d625b829900a2872cd0598ba210922ca8d2e3d6bb575a6e4
SHA512

cc918a0261112446174ab0fe3222841ded9b6c0827ad7f14d8f9313790f3793d7778da7911ba4891536c2bc696bd5419d1c3f62fcddbbe5b9c6ce13154ad2af2
SSDEEP

768:YnBY/rqOGZhYMpUgZXo8QHaRsw+NJZBHbh8:YnB6NGQwlo8QHa2FZX8

Score

N/A

Malware Config

Signatures

Files

f9980ec6e4ebcb91d625b829900a2872cd0598ba210922ca8d2e3d6bb575a6e4
.exe windows x86

9d9801815a5b382a2dcedd0b0395e0f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GlobalFree
GlobalAlloc
WriteProcessMemory
lstrlenA
VirtualFreeEx
LoadLibraryA
VirtualFree
VirtualAllocEx
VirtualAlloc
SetThreadContext
GetThreadContext
ResumeThread
GetModuleFileNameA
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

wsprintfA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE