b9e767878cd14b84507c6f4c7135b1f3fc58b102f88faac49b771800564357ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9e767878cd14b84507c6f4c7135b1f3fc58b102f88faac49b771800564357ad
Size

76KB
MD5

faee309b5daf509fb37e26bef02f6eb7
SHA1

62645a9ddaf2cc7757cb176b7c0c87068877e6c6
SHA256

b9e767878cd14b84507c6f4c7135b1f3fc58b102f88faac49b771800564357ad
SHA512

cd615d6c8834de58084eec81f67be595df9977cad783ec6bcab982f5c7cf7190854c25e9ffdc1b9ce099e84372f62255c63bace67dec2379ca5914c6ef8bf4dd
SSDEEP

1536:zj/Y5DrlgEv0kjoLrqwgnbqLixyzFEqvMlU00ITaBkCl1FFjEErxTWDTMqhGKYIn:z95kUrKHIfvv02BHLjBkMqhGKZTbx

Score

N/A

Malware Config

Signatures

Files

b9e767878cd14b84507c6f4c7135b1f3fc58b102f88faac49b771800564357ad
.exe windows x86

c6a73514bd081003b7dcc9fc9dc49fd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsWow64Process
GetConsoleFontSize
InterlockedIncrement
DefineDosDeviceW
RegisterConsoleIME
CreateDirectoryA
GetProcessHandleCount
TransactNamedPipe
LocalFlags
VirtualBufferExceptionHandler

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE