99c6923ef487689997eadf2a9890e86ecb4a47c8f6071cead60453f15c754576 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99c6923ef487689997eadf2a9890e86ecb4a47c8f6071cead60453f15c754576
Size

37KB
MD5

ae18bbb8911d70ac49761c90a106ff48
SHA1

8e2043d6f0998341b40475d180f48a410ed95c8a
SHA256

99c6923ef487689997eadf2a9890e86ecb4a47c8f6071cead60453f15c754576
SHA512

22c01009e238e5bc6185222bd41e386add9b28c9921bb3b6449fd6839fd4cbbfb9791fefd3f5dc0b4ce14cbb0ca8ae36d28cde56b2a22fc2d35d52530bf279cc
SSDEEP

768:LQfQD3FVVgz7aSPReR/ZC95/mE2CGWqhZQkAxdHGHd8cBUOpDB4W533EGV/c:LQoD1Ez7pp2RC95/YlLQkqmZvpOW5nFk

Score

N/A

Malware Config

Signatures

Files

99c6923ef487689997eadf2a9890e86ecb4a47c8f6071cead60453f15c754576
.exe windows x86

92009019dee90696f2364d47b68ae436

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalW
CreateFileW
ExitProcess
GetFileSize
GetModuleFileNameW
GetThreadContext
GlobalAlloc
ReadFile
ResumeThread
VirtualAllocEx

ntdll

NtSetContextThread
NtWriteVirtualMemory
ZwUnmapViewOfSection

Sections

.text
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE