9c6f07f32b89ca5f32622ab25e5271f1587eb6b9979f3019a5323cccef7f930f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c6f07f32b89ca5f32622ab25e5271f1587eb6b9979f3019a5323cccef7f930f
Size

75KB
MD5

11163c853488f693bd02f45d223e84b7
SHA1

b41bf71fbbe00a82b390b6fc4c47a1dfd6e5a4c2
SHA256

9c6f07f32b89ca5f32622ab25e5271f1587eb6b9979f3019a5323cccef7f930f
SHA512

71350f0245fd2b2af30667557052af9870f8af0b7305feaf39e3f66521479a6ca17649260e63190fdf7632125d81cae92a9d7b6096e89edd761962c2aa4fd08f
SSDEEP

1536:VE9TeRuZOWvOCHHL86Y7GLhjj0E8kSjKxU+JRmKUH9:VSTeRYd3HHw6Y7chjj2kSsUMG9

Score

N/A

Malware Config

Signatures

Files

9c6f07f32b89ca5f32622ab25e5271f1587eb6b9979f3019a5323cccef7f930f
.exe windows x86

fac4930cea95319c17185e832940af3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
IsDebuggerPresent
GetWindowsDirectoryA
GetCommandLineW
GetTempPathA
GetTempPathW
SetFilePointer
RtlMoveMemory
GetCurrentThread
GetOEMCP
GetModuleHandleA
GetCurrentProcessId
GetModuleHandleW
VirtualProtect
GetFileAttributesW
LocalFree
GetCommandLineA
DeleteFileA
WritePrivateProfileStringA
CompareStringA
LoadResource
GetExitCodeProcess
GetTickCount
GetProcAddress
SizeofResource
IsDBCSLeadByte

msvcrt

_XcptFilter
_initterm
__set_app_type
__p___initenv
_except_handler3
_controlfp
__getmainargs
__p__fmode
_adjust_fdiv
_exit
__p__commode

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ