e9ed7fbb767b20f55d393cac645b27d5581c99d8b65d7ac0ca60e3f0d3eb6374 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9ed7fbb767b20f55d393cac645b27d5581c99d8b65d7ac0ca60e3f0d3eb6374
Size

817KB
MD5

68c8070277d82d94a534f5d99ad85897
SHA1

136a10cff128ceae105daa072123a2c55a5c38d2
SHA256

e9ed7fbb767b20f55d393cac645b27d5581c99d8b65d7ac0ca60e3f0d3eb6374
SHA512

5275003f38bc60b294898ae00724020a685e6df241e1e695d6d097fc9226099d8205c60b3870f6d26fb4bd15030f5b8c1a068b0f67692c085ded200e0e4626f3
SSDEEP

24576:QnhUGWZ0uGR0MQ7ARDaACFJKspjInyKAzLBFbRwpzIXI:PGUN7ARDRSKUuyKCbRw

Score

N/A

Malware Config

Signatures

Files

e9ed7fbb767b20f55d393cac645b27d5581c99d8b65d7ac0ca60e3f0d3eb6374
.exe windows x86

96c82c0cdbff18bab9ef2b30943157ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtectEx
lstrcpynA
GetFileSize
OpenMutexW
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
DeleteFileW
lstrcpynA
GetCurrentDirectoryA
ReadConsoleA
ReadFile
FormatMessageW
GetCurrentThreadId
GetModuleHandleA
lstrcpynA
lstrcatA
VirtualFree
SetThreadPriority
GetDiskFreeSpaceW
GetFileType
lstrcpynA
lstrcmpA
GetCommandLineW
lstrcpynA
lstrcpynA
lstrcpynA
CreateDirectoryW

certmgr

DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ