aa9d0cf00563dbf834f87c1dc9bc552e14d52f1418dd9e3568aa584db49df189 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa9d0cf00563dbf834f87c1dc9bc552e14d52f1418dd9e3568aa584db49df189
Size

56KB
MD5

0f0e05150c0b1bd11ff7f16a55944df0
SHA1

5ecfc2973083aa23ad8625b6b8abe374e89e9a0c
SHA256

aa9d0cf00563dbf834f87c1dc9bc552e14d52f1418dd9e3568aa584db49df189
SHA512

05e443b02ac8d4931c46a34076e770697efa4f1a2c4752eba782a4ca15c2535e7bddada2965dc4edeaac14f6db585a91aae0170fb4ae14e8a9cecf1fd698652f
SSDEEP

1536:8YV2C2gVhJzBsoB0bLpUICdbQxaTBR+0iop8+cvBuC:8YV2CBJy1bLpPCdwoBR+0U+s

Score

N/A

Malware Config

Signatures

Files

aa9d0cf00563dbf834f87c1dc9bc552e14d52f1418dd9e3568aa584db49df189
.exe windows x86

6374404e9947933fe4ef7443681f2fe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
CreateEventA
SetVDMCurrentDirectories
IsProcessorFeaturePresent
CreateMemoryResourceNotification
CreateActCtxW
OpenConsoleW
RegisterWaitForSingleObjectEx
LZClose
FileTimeToDosDateTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE