eff751eb8806aa9000fbee32288c8e5e1c0ff8dad07c6f598e86a256b1d1bf36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eff751eb8806aa9000fbee32288c8e5e1c0ff8dad07c6f598e86a256b1d1bf36
Size

1.1MB
MD5

a171333839f204276b1bd4321fe87b77
SHA1

75921ff87ffe10b319053c2ae9a6b20a1315ef24
SHA256

eff751eb8806aa9000fbee32288c8e5e1c0ff8dad07c6f598e86a256b1d1bf36
SHA512

c83e6dd3eb06a32385651e48fb3f70f3205bdd281819b1dd76fa900ff90ac903e989007b8e00dcd9f3f879399f9c0263bf6bbfa1eaf81684cd87bb870bf322eb
SSDEEP

12288:AUXm9k+HCbRCe2sqYlordoAgWPHYLs6eHT2OuRCl7A4EavGSEoEkxbo5LrsUqktn:AUXmBo/ugWvYDeHT/hA4VvhEFOYkI5

Score

N/A

Malware Config

Signatures

Files

eff751eb8806aa9000fbee32288c8e5e1c0ff8dad07c6f598e86a256b1d1bf36
.exe windows x86

a7bbbc378f55cacb51bd14de8bf21f2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleW
GetCommandLineW
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetVersion
GetCommandLineA
GetUserDefaultLangID
GetCurrentProcess
GetTickCount
GetModuleHandleA
VirtualAlloc
InterlockedIncrement
InterlockedCompareExchange
GetCurrentThreadId
QueryPerformanceCounter
SetEvent
LoadResource
TerminateProcess
FormatMessageW

user32

ShowWindow
SetForegroundWindow
PeekMessageA
GetClientRect
EndDialog
GetSystemMenu

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ