9e55dd700e3cdd096111f207bc2d70163431d4fa486f64271cb8f3fa1a8be675 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e55dd700e3cdd096111f207bc2d70163431d4fa486f64271cb8f3fa1a8be675
Size

72KB
MD5

53f847f6bae0db32d13e74d94b319fad
SHA1

08fd4d8c75eab502227e5a5fc6ce463312ad316e
SHA256

9e55dd700e3cdd096111f207bc2d70163431d4fa486f64271cb8f3fa1a8be675
SHA512

87802742b68f47ca83eaf5d46fb87740448240905b170f3b67bc11d6a3812b1f728eac084603b772437fad6d78cee28a4000eb942b421ef2c7d3995d5c317f69
SSDEEP

768:xXsoBmbXq6x6GPXtWAfK9+gBfcFBkXQG+Y0+HAysm4LtOAIaKoRj:xXsoBUXr6GPtvHg+FBkXT08kLtOAWoR

Score

N/A

Malware Config

Signatures

Files

9e55dd700e3cdd096111f207bc2d70163431d4fa486f64271cb8f3fa1a8be675
.dll windows x86

761d893b6c244507eb7b85157ace572b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleFileNameA
FreeLibrary
GetModuleHandleA
GetSystemDirectoryA
GetCurrentProcessId
DeleteFileA
FindFirstFileA
CopyFileA
IsBadReadPtr
CreateFileA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetProcAddress
WideCharToMultiByte
LoadLibraryA
CreateFileMappingW
MultiByteToWideChar
GetVersion
LoadLibraryExA
lstrlenW
lstrlenA
GetCurrentProcess
DuplicateHandle
WaitForSingleObject
CreateRemoteThread

msvcrt

_strlwr
free
malloc
strlen
strcat
strcpy
memcpy
_stricmp
sprintf
_strdup
strncmp
_snprintf
memset
??3@YAXPAX@Z
??2@YAPAXI@Z

Exports

Exports

input

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE