d9f17a4dc7bd0f1ccb594c778af73068fdb2ed7c31aa020445db556f70587393 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9f17a4dc7bd0f1ccb594c778af73068fdb2ed7c31aa020445db556f70587393
Size

44KB
MD5

1d485fb8a4d59b8bff521b28a0597e04
SHA1

4543ac4c9e7a4ffe0b6031abc1edd6d5439cf87c
SHA256

d9f17a4dc7bd0f1ccb594c778af73068fdb2ed7c31aa020445db556f70587393
SHA512

7423c13f853f62815da96bf23c5d5275114f156273619a57aee6bda2755489e5e7c97065783a2f9f39a9e21f96e7e6e2434abf43733c81d8aa9a7bc2c4256aa6
SSDEEP

384:nbkd1g+RwrQ2hqrJxHH4mlvieXpQa/Sy3f3h+J89:nSg+RSQ2Ir7HRHtSkuw

Score

N/A

Malware Config

Signatures

Files

d9f17a4dc7bd0f1ccb594c778af73068fdb2ed7c31aa020445db556f70587393
.exe windows x86

1c9449330c4f03b6524bacba296ae886

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
ShellExecuteA

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
_initterm
__set_app_type
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
sprintf
strchr
strcat
strcpy
fopen
fprintf
fclose
__p__fmode

kernel32

GetStartupInfoA
GetModuleHandleA
WinExec
CreateFileA
CloseHandle
GetFileTime
SetFileTime
GetWindowsDirectoryA
DeleteFileA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
GetModuleFileNameA
Sleep

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE