f9bbbfda54d1238a7e514e0cb10d64c394cbc3e9715f8fd77ad25bb7b60687e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9bbbfda54d1238a7e514e0cb10d64c394cbc3e9715f8fd77ad25bb7b60687e1
Size

310KB
MD5

972d0edfc6391e3ce603177bfa736078
SHA1

d21eee517de41dc37cf1938036428f1b63c3e579
SHA256

f9bbbfda54d1238a7e514e0cb10d64c394cbc3e9715f8fd77ad25bb7b60687e1
SHA512

a5fc35e342f3438878516a0814ca71fb265ad5ee88a5cfb12233d98d92af687742122f02b733d92f37824b8adb93d4ea1e5d788d70c80be2f915f1e3b3e1ff6f
SSDEEP

6144:4Ge0QXbQjv8x4UvXmCa91jgHE4XCG0FMEhvhEL:4YQXML8JvXGKE4XCFMEn4

Score

N/A

Malware Config

Signatures

Files

f9bbbfda54d1238a7e514e0cb10d64c394cbc3e9715f8fd77ad25bb7b60687e1
.exe windows x86

6c6c174d25d785a7f142f06db4feb55f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStringTypeW
TlsFree
GetCurrentThread
GetLocaleInfoW
WriteConsoleA
GetModuleHandleA
DeleteFileW
lstrlenA
GetModuleFileNameW
VirtualFree
lstrcpynW
GetPrivateProfileIntA
CreateEventW
VirtualProtectEx
SetCurrentDirectoryW
FormatMessageA
GetFullPathNameW
TlsGetValue
GetCommandLineA

wmadmod

DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 13KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 290KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.udata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ