b4d9880e6ea85c04b1e49a9047ff23d05e82da58c505442a2a6e39d5f1cc4ec2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4d9880e6ea85c04b1e49a9047ff23d05e82da58c505442a2a6e39d5f1cc4ec2
Size

122KB
MD5

bff7a3a094053437ec8304aad2432890
SHA1

6363f482f4832749ce86a5e0b8395840056333a3
SHA256

b4d9880e6ea85c04b1e49a9047ff23d05e82da58c505442a2a6e39d5f1cc4ec2
SHA512

aedd4b15f83efa664947db5d15269e4de75c22e33a6d979b041afe37b513df4de4b97ba1fe6fa5b4410dbf5dd87585eff1ceefa14da67c216c97575b129c5b1a
SSDEEP

1536:8Mjc5F2pMORKVD4xw/KHpRW9ia/2GaIUwkpxGHktOBLMZ5Sv3/:s5spdWi84r8UBGlBUSX

Score

N/A

Malware Config

Signatures

Files

b4d9880e6ea85c04b1e49a9047ff23d05e82da58c505442a2a6e39d5f1cc4ec2
.dll windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

fork
forkonce

Sections

.text
Size: 104KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE