9b27b03fcbaa6a1c1d2b8cf991c6f3aab2b1e64dd2411a07c7f3757b20700e05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b27b03fcbaa6a1c1d2b8cf991c6f3aab2b1e64dd2411a07c7f3757b20700e05
Size

436KB
MD5

42db233175a7482abf7a8a3e1f5b8574
SHA1

bc30b22a9a4ff1a4d0ed674bac5a81279393d4df
SHA256

9b27b03fcbaa6a1c1d2b8cf991c6f3aab2b1e64dd2411a07c7f3757b20700e05
SHA512

202b1baeb22d34dab131394c715e2d452e10043843bf6949ebff6f1311cd1002ee07b61c11cef5845ebcb9df9cb56fe67a25efcc53d34eef3a98df9507370589
SSDEEP

12288:sKW3Lcb4HfhJrYgF4pHxj2vk+Qcd4W/li:sKnefP8gFKHxys+Qcd4Wti

Score

N/A

Malware Config

Signatures

Files

9b27b03fcbaa6a1c1d2b8cf991c6f3aab2b1e64dd2411a07c7f3757b20700e05
.exe windows x86

0e93dda4ecf18e3b98cd107e0b393dee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
ExitProcess
CreateFileA
GetCurrentProcess
LCMapStringA

user32

wsprintfA
CloseWindow
CharLowerBuffA
SetWindowLongA
CreateWindowExA

advapi32

RegSetValueA
RegEnumValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 408KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ