9b386dfc43fcf34d74f44c23710a94f42fa8c993d572504e2f3a8197b489adfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b386dfc43fcf34d74f44c23710a94f42fa8c993d572504e2f3a8197b489adfb
Size

344KB
MD5

cd17921b55456a73bfacd2ad1f6ec20b
SHA1

0aa8b08e23fa336ce338f2dafd0957aa7d180bbb
SHA256

9b386dfc43fcf34d74f44c23710a94f42fa8c993d572504e2f3a8197b489adfb
SHA512

27e1dfeeef87e4ab473f6927c2a009e98964c1b0aede617d0b804026798e7ee43a6d1cc44b5e08c486f00420b98441e9d958ea12e73df9e293345b549883f4a2
SSDEEP

6144:Ec6ZZclfqmPgNKV7p5o41/fXLadRTHV2bVhKirgtHQm4e7/iIJ0:E56lfqmoNgXLO12bVhKiLlI

Score

N/A

Malware Config

Signatures

Files

9b386dfc43fcf34d74f44c23710a94f42fa8c993d572504e2f3a8197b489adfb
.exe windows x86

cf0c840c727c4e40934f34c9c4d7ffc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetCommandLineA
VirtualProtect
GlobalFree
DebugBreak
GetModuleHandleW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
Sleep
GetCurrentThreadId
DisableThreadLibraryCalls
GetModuleHandleA
GetStartupInfoA

msvcr71

free
strncpy
_c_exit
_adjust_fdiv
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_except_handler3
_exit

Sections

.text
Size: 328KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ